Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://bonzisoftwar...

windows11-ltsc_2024-x64

8

Analysis

  • geolocation tags

    cacanadananorth-americatoronto
  • user interaction
    yes
  • max time kernel
    689s
  • max time network
    692s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260618-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/06/2026, 03:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://bonzisoftware.itch.io/bonzi-buddy-safe-version
  • Sample260623-ea7b8sh14l
Score
8/10
adwarediscoverypersistenceprivilege_escalationransomwarespywarestealerupx

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 2 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 2 IoCs

    Attempt to gather information on host's network.

    discovery
  • Drops file in System32 directory 19 IoCs
  • UPX packed file 11 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 44 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 31 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 7 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 18 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 15 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 32 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 55 IoCs
  • Suspicious use of SetWindowsHookEx 47 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bonzisoftware.itch.io/bonzi-buddy-safe-version
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4712
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7fffe75ec728,0x7fffe75ec734,0x7fffe75ec740
      2⤵
        PID:2528
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1672,i,4266571794968852262,17990352094176999104,524288 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:11
        2⤵
        • System Time Discovery
        PID:1864
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2212,i,9259104415861329336,7632236353695070171,524288 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:13
        2⤵
          PID:5836
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1620,i,84538580943280045,11760638602221344977,262144 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=1912 /prefetch:2
          2⤵
            PID:6108
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3060,i,16961978617444215644,18210323547855227960,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:1
            2⤵
              PID:5212
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3064,i,5124253336749916411,6339334598869215209,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:1
              2⤵
                PID:4052
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5192,i,10101103214365076924,3207650288554041535,524288 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
                2⤵
                  PID:3652
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5260,i,11224890362785251360,13474481728256965922,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:1
                  2⤵
                    PID:5172
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5300,i,9635416721127810971,6282384773502340184,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
                    2⤵
                      PID:3832
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5576,i,13950350279130136617,9969053124170793706,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:1
                      2⤵
                        PID:956
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5756,i,9002866407290345471,15177508058481999871,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:1
                        2⤵
                          PID:4280
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5296,i,2767152368592645727,5733941122918090154,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:1
                          2⤵
                            PID:2652
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5216,i,3613884726950120269,15907752297318091452,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:1
                            2⤵
                              PID:5752
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5936,i,15396262604013058689,11898985112089433141,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:1
                              2⤵
                                PID:3448
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5316,i,9606707096865318943,13618448963500335702,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:1
                                2⤵
                                  PID:4124
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6032,i,2188207342118515846,385086022464014030,524288 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:14
                                  2⤵
                                    PID:1400
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5968,i,7785469795252555881,1248562882575295516,524288 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:14
                                    2⤵
                                      PID:5756
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5520,i,8848695335985667623,5048309330002669765,524288 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
                                      2⤵
                                        PID:3164
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5780,i,4625257353108523709,11224404587282159240,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:1
                                        2⤵
                                          PID:5556
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3216,i,877582554676421492,5144301542904772100,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:1
                                          2⤵
                                            PID:2540
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5472,i,692943316063427268,11234475915814736019,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:1
                                            2⤵
                                              PID:1740
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3104,i,13840735083012908767,9985731598274024837,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:1
                                              2⤵
                                                PID:6068
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6288,i,12929825166575272161,18344889006666872815,2097152 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:1
                                                2⤵
                                                  PID:2888
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5256,i,3666940457614965761,4133403920207510546,524288 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:14
                                                  2⤵
                                                    PID:1700
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4812,i,17870391688314127583,575140227297738157,262144 --field-trial-handle=1916,i,9133816876933353990,6588893431481535022,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:10
                                                    2⤵
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:6204
                                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                  1⤵
                                                    PID:2936
                                                  • C:\Windows\system32\svchost.exe
                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                    1⤵
                                                      PID:4760
                                                    • C:\Windows\system32\svchost.exe
                                                      C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                      1⤵
                                                      • Modifies data under HKEY_USERS
                                                      PID:3300
                                                    • C:\Windows\system32\svchost.exe
                                                      C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                      1⤵
                                                        PID:3164
                                                      • C:\Windows\System32\rundll32.exe
                                                        C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                        1⤵
                                                          PID:1396
                                                        • C:\Users\Admin\Downloads\Bonzi 2\BonziBuddy432.exe
                                                          "C:\Users\Admin\Downloads\Bonzi 2\BonziBuddy432.exe"
                                                          1⤵
                                                          • Loads dropped DLL
                                                          • Drops file in Program Files directory
                                                          • System Location Discovery: System Language Discovery
                                                          • Modifies registry class
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:4692
                                                          • C:\Windows\SysWOW64\cmd.exe
                                                            C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat" "
                                                            2⤵
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:7160
                                                            • C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE
                                                              MSAGENT.EXE
                                                              3⤵
                                                              • Boot or Logon Autostart Execution: Active Setup
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Drops file in Windows directory
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:6300
                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                regsvr32 /s "C:\Windows\msagent\AgentCtl.dll"
                                                                4⤵
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                • Modifies registry class
                                                                PID:6864
                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                regsvr32 /s "C:\Windows\msagent\AgentDPv.dll"
                                                                4⤵
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                • Modifies registry class
                                                                PID:6880
                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                regsvr32 /s "C:\Windows\msagent\mslwvtts.dll"
                                                                4⤵
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                • Modifies registry class
                                                                PID:6904
                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                regsvr32 /s "C:\Windows\msagent\AgentDP2.dll"
                                                                4⤵
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                • Modifies registry class
                                                                PID:6936
                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                regsvr32 /s "C:\Windows\msagent\AgentMPx.dll"
                                                                4⤵
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                PID:6952
                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                regsvr32 /s "C:\Windows\msagent\AgentSR.dll"
                                                                4⤵
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                PID:6968
                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                regsvr32 /s "C:\Windows\msagent\AgentPsh.dll"
                                                                4⤵
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                PID:7032
                                                              • C:\Windows\msagent\AgentSvr.exe
                                                                "C:\Windows\msagent\AgentSvr.exe" /regserver
                                                                4⤵
                                                                • Executes dropped EXE
                                                                • System Location Discovery: System Language Discovery
                                                                • Modifies registry class
                                                                PID:5096
                                                              • C:\Windows\SysWOW64\grpconv.exe
                                                                grpconv.exe -o
                                                                4⤵
                                                                • System Location Discovery: System Language Discovery
                                                                PID:7152
                                                            • C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe
                                                              tv_enua.exe
                                                              3⤵
                                                              • Boot or Logon Autostart Execution: Active Setup
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Adds Run key to start application
                                                              • Drops file in System32 directory
                                                              • Drops file in Windows directory
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:4372
                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                regsvr32 /s C:\Windows\lhsp\tv\tv_enua.dll
                                                                4⤵
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                PID:1248
                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                regsvr32 /s C:\Windows\lhsp\tv\tvenuax.dll
                                                                4⤵
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                PID:2512
                                                              • C:\Windows\SysWOW64\grpconv.exe
                                                                grpconv.exe -o
                                                                4⤵
                                                                • System Location Discovery: System Language Discovery
                                                                PID:6548
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://bonzibuddy.tk/
                                                            2⤵
                                                            • Drops file in Windows directory
                                                            • Enumerates system info in registry
                                                            • Modifies data under HKEY_USERS
                                                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                            • Suspicious use of FindShellTrayWindow
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:6432
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f8,0x2fc,0x300,0x2f4,0x168,0x7fffda1fc188,0x7fffda1fc194,0x7fffda1fc1a0
                                                              3⤵
                                                                PID:6600
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,13899655358379658185,2969836844281146988,262144 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:2
                                                                3⤵
                                                                  PID:6844
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,17628762676604824896,8044086870227191202,524288 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:11
                                                                  3⤵
                                                                  • System Time Discovery
                                                                  PID:2136
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,13820980823674135183,13448608195255033744,524288 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=3256 /prefetch:13
                                                                  3⤵
                                                                    PID:6904
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,779243375261566591,5697762747274937951,2097152 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
                                                                    3⤵
                                                                      PID:6948
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3540,i,16625798800630483413,2620074679639793721,2097152 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
                                                                      3⤵
                                                                        PID:6956
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4112,i,12303800320364147403,1649688508315690095,2097152 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:1
                                                                        3⤵
                                                                          PID:7016
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4124,i,11002910754692519705,10041522947999383025,2097152 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:9
                                                                          3⤵
                                                                            PID:5028
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3612,i,1712688333619781635,16956403913687025878,2097152 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:1
                                                                            3⤵
                                                                              PID:6416
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,7728706303709035902,14686674703407334741,524288 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:14
                                                                              3⤵
                                                                                PID:6528
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,4061333555345597199,1067423322729537848,524288 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:14
                                                                                3⤵
                                                                                  PID:6792
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,7552525804866607512,1379736555322965831,524288 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:14
                                                                                  3⤵
                                                                                    PID:5716
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,1151936510638263725,6100394706632230488,524288 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
                                                                                    3⤵
                                                                                      PID:7068
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,1151936510638263725,6100394706632230488,524288 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
                                                                                      3⤵
                                                                                        PID:6264
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,7030542510871119686,7120044905104668012,524288 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
                                                                                        3⤵
                                                                                          PID:2848
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,8094485666785321127,6772591135178616511,524288 --field-trial-handle=2380,i,17540515039089438794,13602450940374509879,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:14
                                                                                          3⤵
                                                                                            PID:6184
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                                                            3⤵
                                                                                              PID:7356
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                          1⤵
                                                                                            PID:6840
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                            1⤵
                                                                                            • Drops file in Windows directory
                                                                                            • Enumerates system info in registry
                                                                                            • Modifies data under HKEY_USERS
                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                            PID:6444
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x290,0x7fffda1fc188,0x7fffda1fc194,0x7fffda1fc1a0
                                                                                              2⤵
                                                                                                PID:7376
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2108,i,13112415613845291955,10476111358575972009,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:11
                                                                                                2⤵
                                                                                                • System Time Discovery
                                                                                                PID:7632
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1960,i,5399212605453687524,9075470569094363933,262144 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
                                                                                                2⤵
                                                                                                  PID:7640
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2808,i,662929589207366366,745856549463421017,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:13
                                                                                                  2⤵
                                                                                                    PID:7668
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,15849221356405512921,3509301096146903686,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
                                                                                                    2⤵
                                                                                                      PID:8000
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,15849221356405512921,3509301096146903686,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
                                                                                                      2⤵
                                                                                                        PID:8012
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1188,i,16974262734319110463,7164123628387315198,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=1292 /prefetch:14
                                                                                                        2⤵
                                                                                                          PID:6576
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1228,i,10196270013694686633,7989033074229233433,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=1132 /prefetch:14
                                                                                                          2⤵
                                                                                                            PID:6652
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1232,i,165562133088819760,5397858855972642718,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
                                                                                                            2⤵
                                                                                                              PID:6480
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,5823456605389608192,14328470582659503766,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
                                                                                                              2⤵
                                                                                                                PID:6564
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,17049731379348307407,147837210259129750,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
                                                                                                                2⤵
                                                                                                                  PID:3096
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,14106148452487113171,14642399697470164056,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
                                                                                                                  2⤵
                                                                                                                    PID:4052
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1792,i,11775988505849240301,1045498084989521916,262144 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:10
                                                                                                                    2⤵
                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                    PID:2308
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,12234086707870942315,883105266860992893,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:14
                                                                                                                    2⤵
                                                                                                                      PID:4808
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4732,i,3967870571545920097,17178725135833533612,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:14
                                                                                                                      2⤵
                                                                                                                        PID:7184
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=820,i,10639886425439942419,11090828309128984489,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:14
                                                                                                                        2⤵
                                                                                                                          PID:6992
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,12442617638851642851,9186409362267988639,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=820 /prefetch:14
                                                                                                                          2⤵
                                                                                                                            PID:5012
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,13527862799424311082,15878116858620269684,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:14
                                                                                                                            2⤵
                                                                                                                              PID:3196
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,7993614373110714545,2718514659065550522,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
                                                                                                                              2⤵
                                                                                                                                PID:4524
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,7541988907433658920,17995293236969171280,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
                                                                                                                                2⤵
                                                                                                                                  PID:7520
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3016,i,12740296409288537086,16355011034116717748,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:14
                                                                                                                                  2⤵
                                                                                                                                    PID:2336
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2820,i,4952000053619989961,16420120303437545892,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:14
                                                                                                                                    2⤵
                                                                                                                                      PID:5772
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4644,i,14000513754321933777,11793813550401086798,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:14
                                                                                                                                      2⤵
                                                                                                                                        PID:4788
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,6416010420364452093,13647979154573950171,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:14
                                                                                                                                        2⤵
                                                                                                                                          PID:11460
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,9246914477324589097,17047860799497370957,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
                                                                                                                                          2⤵
                                                                                                                                            PID:6652
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3984,i,10774144119290376433,17536961551268864289,524288 --field-trial-handle=2360,i,3542875251155323286,14547535485973871192,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
                                                                                                                                            2⤵
                                                                                                                                              PID:11588
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                            1⤵
                                                                                                                                              PID:7660
                                                                                                                                            • C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE
                                                                                                                                              "C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE"
                                                                                                                                              1⤵
                                                                                                                                              • Executes dropped EXE
                                                                                                                                              • Loads dropped DLL
                                                                                                                                              • Drops file in Program Files directory
                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                              • Modifies registry class
                                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                                              PID:6740
                                                                                                                                            • C:\Windows\msagent\AgentSvr.exe
                                                                                                                                              C:\Windows\msagent\AgentSvr.exe -Embedding
                                                                                                                                              1⤵
                                                                                                                                              • Executes dropped EXE
                                                                                                                                              • Loads dropped DLL
                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                                                              • Suspicious use of SendNotifyMessage
                                                                                                                                              PID:6520
                                                                                                                                            • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                              C:\Windows\system32\AUDIODG.EXE 0x00000000000004EC 0x00000000000004E0
                                                                                                                                              1⤵
                                                                                                                                                PID:7660
                                                                                                                                              • C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE
                                                                                                                                                "C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE"
                                                                                                                                                1⤵
                                                                                                                                                • Executes dropped EXE
                                                                                                                                                • Loads dropped DLL
                                                                                                                                                • Drops file in Program Files directory
                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                • Modifies Internet Explorer settings
                                                                                                                                                • Modifies registry class
                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                PID:6944
                                                                                                                                                • C:\Windows\SysWOW64\rundll32.exe
                                                                                                                                                  rundll32.exe shell32.dll,Control_RunDLL speech.cpl,,0
                                                                                                                                                  2⤵
                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                  PID:6168
                                                                                                                                                  • C:\Windows\system32\RunDll32.exe
                                                                                                                                                    C:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL speech.cpl,,0
                                                                                                                                                    3⤵
                                                                                                                                                      PID:4080
                                                                                                                                                • C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE
                                                                                                                                                  "C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE"
                                                                                                                                                  1⤵
                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                  PID:7256
                                                                                                                                                • C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE
                                                                                                                                                  "C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE"
                                                                                                                                                  1⤵
                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                  PID:7276
                                                                                                                                                • C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE
                                                                                                                                                  "C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE"
                                                                                                                                                  1⤵
                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                  PID:1448
                                                                                                                                                • C:\Program Files (x86)\Internet Explorer\ielowutil.exe
                                                                                                                                                  "C:\Program Files (x86)\Internet Explorer\ielowutil.exe" -CLSID:{0002DF01-0000-0000-C000-000000000046} -Embedding
                                                                                                                                                  1⤵
                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                  PID:4876
                                                                                                                                                • C:\Program Files\Internet Explorer\iexplore.exe
                                                                                                                                                  "C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
                                                                                                                                                  1⤵
                                                                                                                                                  • Modifies Internet Explorer settings
                                                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                  PID:5964
                                                                                                                                                  • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                                                                                                                    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5964 CREDAT:17410 /prefetch:2
                                                                                                                                                    2⤵
                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                    • Modifies Internet Explorer settings
                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                    PID:2480
                                                                                                                                                  • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                                                                                                                    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5964 CREDAT:82948 /prefetch:2
                                                                                                                                                    2⤵
                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                    • Modifies Internet Explorer settings
                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                    PID:5032
                                                                                                                                                  • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                                                                                                                    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5964 CREDAT:82952 /prefetch:2
                                                                                                                                                    2⤵
                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                    • Modifies Internet Explorer settings
                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                    PID:4456
                                                                                                                                                  • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                                                                                                                    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5964 CREDAT:82956 /prefetch:2
                                                                                                                                                    2⤵
                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                    • Modifies Internet Explorer settings
                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                    PID:4912
                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                                                                  1⤵
                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                  • Modifies data under HKEY_USERS
                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                                                                  PID:2732
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7fffe75ec728,0x7fffe75ec734,0x7fffe75ec740
                                                                                                                                                    2⤵
                                                                                                                                                      PID:6148
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1828,i,10542733114601052452,1769913509162885494,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:11
                                                                                                                                                      2⤵
                                                                                                                                                      • Downloads MZ/PE file
                                                                                                                                                      • System Time Discovery
                                                                                                                                                      PID:6256
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,14151191312266363498,7794239160532825182,262144 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=1844 /prefetch:2
                                                                                                                                                      2⤵
                                                                                                                                                        PID:5996
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2296,i,11797837430455654217,3052872278328278236,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:13
                                                                                                                                                        2⤵
                                                                                                                                                          PID:1592
                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,9485774951548033276,15513258648762587619,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:1612
                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,13429197266083615318,4834751371806855394,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:6440
                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4696,i,3821615593251820467,14068154617876001045,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:4140
                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4884,i,14946843412555324264,7267176866273849417,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:14
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:7440
                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4880,i,12890958987100518812,15851319516929964874,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:14
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:2188
                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5192,i,3913103982354719210,12341829266379656312,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:1376
                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5392,i,16983290528100930793,7455412136782850803,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:3464
                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5604,i,16767466388123830341,4505895335008479142,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:14
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:2824
                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5676,i,8438544663798579021,8775050466317905150,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:2108
                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5688,i,7846913424428575961,9843900438090723932,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:2084
                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5948,i,9254702309978184421,2532236401191534132,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:4460
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5984,i,13138301811115832061,13775450604290521679,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:9
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:6308
                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4712,i,8440207872747834899,12247974842804069747,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:5412
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6056,i,5925605035984004383,8485175546653727307,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:2632
                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6068,i,3734599955475577124,2595782105177168582,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:1204
                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6060,i,4714970589016829294,11277535698772293076,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:3584
                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6200,i,17372764869498803135,6882637494697998254,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:7708
                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3660,i,12207453840474312191,11891297741162213401,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:14
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:4744
                                                                                                                                                                                            • C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe
                                                                                                                                                                                              "C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe"
                                                                                                                                                                                              2⤵
                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                              PID:6440
                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:3969818 "__IRAFN:C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe" "__IRCT:3" "__IRTSS:26673860" "__IRSID:S-1-5-21-537605601-1362463912-856654178-1000"
                                                                                                                                                                                                3⤵
                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                PID:1344
                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                  PID:6956
                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:3839250 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:3869932" "__IRSID:S-1-5-21-537605601-1362463912-856654178-1000"
                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                    • Loads dropped DLL
                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                    PID:5680
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                      PID:1040
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\7zS0142C26E\installer.exe
                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\7zS0142C26E\installer.exe --silent --allusers=0 --server-tracking-blob=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
                                                                                                                                                                                                        7⤵
                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                        • Enumerates connected drives
                                                                                                                                                                                                        • Enumerates system info in registry
                                                                                                                                                                                                        PID:1976
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS0142C26E\installer.exe
                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\7zS0142C26E\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.82 --initial-client-data=0x2a8,0x2ac,0x2b0,0x280,0x2b4,0x7ff6ad937e08,0x7ff6ad937e14,0x7ff6ad937e20
                                                                                                                                                                                                          8⤵
                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                          PID:6868
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\installer.exe
                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\installer.exe" --version
                                                                                                                                                                                                          8⤵
                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                          PID:480
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS0142C26E\installer.exe
                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\7zS0142C26E\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=1976 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_20260622235126" --session-guid=98793f9f-a589-47a2-80a6-f74fa0ad1838 --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0808000000000000
                                                                                                                                                                                                          8⤵
                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                          • Enumerates connected drives
                                                                                                                                                                                                          • Enumerates system info in registry
                                                                                                                                                                                                          PID:8052
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\7zS0142C26E\installer.exe
                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\7zS0142C26E\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.82 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff6ad937e08,0x7ff6ad937e14,0x7ff6ad937e20
                                                                                                                                                                                                            9⤵
                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                            PID:3940
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe" --backend --initial-pid=1976 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261" --session-guid=98793f9f-a589-47a2-80a6-f74fa0ad1838 --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=132.0.5905.43
                                                                                                                                                                                                            9⤵
                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                            • Enumerates connected drives
                                                                                                                                                                                                            PID:2028
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x2a4,0x2a8,0x2ac,0x2a0,0x2b0,0x7ff70ed57e08,0x7ff70ed57e14,0x7ff70ed57e20
                                                                                                                                                                                                              10⤵
                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                              PID:6472
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\assistant\assistant_installer.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                                                                                                                                                                                                              10⤵
                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                              • Loads dropped DLL
                                                                                                                                                                                                              • Adds Run key to start application
                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                              • Enumerates system info in registry
                                                                                                                                                                                                              • Modifies Internet Explorer settings
                                                                                                                                                                                                              PID:6252
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\assistant\assistant_installer.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x444b80,0x444b8c,0x444b98
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                PID:3400
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:748
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x5f4b80,0x5f4b8c,0x5f4b98
                                                                                                                                                                                                                  12⤵
                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                  PID:992
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                                                                                                                                                                                                  12⤵
                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                  PID:5948
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                                                                                                    13⤵
                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                                                                                    PID:6476
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x178,0x17c,0x180,0x174,0x184,0x7fffae394ff0,0x7fffae395000,0x7fffae395010
                                                                                                                                                                                                                      14⤵
                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                      PID:9144
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                                                                                                    13⤵
                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                                                                                    PID:3544
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7fffae394ff0,0x7fffae395000,0x7fffae395010
                                                                                                                                                                                                                      14⤵
                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                      PID:7876
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x2cc,0x2d0,0x2d4,0x2a8,0x2d8,0x628378,0x628384,0x628390
                                                                                                                                                                                                                    13⤵
                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                    PID:1388
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                                                                                                      14⤵
                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                                                                                      PID:8212
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x174,0x178,0x17c,0x150,0x180,0x7fffae394ff0,0x7fffae395000,0x7fffae395010
                                                                                                                                                                                                                        15⤵
                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                        PID:8280
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                                                                                                      14⤵
                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                                                                                      PID:8500
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7fffae394ff0,0x7fffae395000,0x7fffae395010
                                                                                                                                                                                                                        15⤵
                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                        PID:8912
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                                                                                                      14⤵
                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                                                                                      PID:9052
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7fffae394ff0,0x7fffae395000,0x7fffae395010
                                                                                                                                                                                                                        15⤵
                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                        PID:5768
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                                                                                                                                                                                              10⤵
                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                              • Adds Run key to start application
                                                                                                                                                                                                              • Checks processor information in registry
                                                                                                                                                                                                              • Enumerates system info in registry
                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                                                                                              • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                              PID:6928
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7fffae394ff0,0x7fffae395000,0x7fffae395010
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                PID:6308
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=1804,i,12014224904621186003,13003727546710568671,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2984 /prefetch:11
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • System Time Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:8292
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1556,i,17127992209690415994,9351420451250785356,262144 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2780 /prefetch:2
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:8308
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=1996,i,9910614746266902257,8793751075362056610,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3088 /prefetch:13
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                PID:8316
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3020,i,16493663594315871344,15713477260174428757,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3156 /prefetch:14
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:8324
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3032,i,11436716261317360797,823931841395261477,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3176 /prefetch:14
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:8332
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2992,i,3072861043561904370,9151400910996939593,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2976 /prefetch:14
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:8340
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3008,i,16120394604726878700,4422552764337757942,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3136 /prefetch:14
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:8348
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3056,i,16109406778805431832,9962474149052020668,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3328 /prefetch:14
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:8368
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3044,i,9187711682097219672,6603481288226293310,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3196 /prefetch:14
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:8356
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3308,i,6830909136978197865,11276668938299371693,2097152 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3556 /prefetch:1
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:8388
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_gx_splash.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                PID:8428
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4624,i,15340194966445676789,17181623245460672500,2097152 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4628 /prefetch:1
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:9320
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4800,i,8791467259705988695,9520266631576570744,2097152 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4804 /prefetch:9
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:9452
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4972,i,14310967690233987876,15074514365591157575,2097152 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4968 /prefetch:1
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:9528
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5008,i,7813163664480275567,15671889272441751218,2097152 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5024 /prefetch:1
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:9552
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5264,i,2205399483017944588,17803988146355533639,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5296 /prefetch:14
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                PID:9568
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5268,i,16707693937477312287,9566960082918654331,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5308 /prefetch:14
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:9576
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5272,i,12782851922054221056,3872805063988640545,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5316 /prefetch:14
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:9584
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5276,i,9071570840228489,1891815576847110713,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5328 /prefetch:14
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:9592
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5640,i,379834950260328712,12138918393579251952,2097152 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5596 /prefetch:9
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:9964
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5428,i,17964131035307390534,1191851325240679545,2097152 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=5468 /prefetch:9
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:10936
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6932,i,14021135321693648975,3498511122176062833,2097152 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6980 /prefetch:9
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:11188
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2000,i,10955754274246347389,168715378304659924,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=2348 /prefetch:13
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:8632
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4164,i,8300187332956903684,3832945009021313384,2097152 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3532 /prefetch:1
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                PID:11364
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                                                                                                                                                                                11⤵
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:12264
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x298,0x29c,0x2a0,0x270,0x2a4,0x7ff6d0043900,0x7ff6d004390c,0x7ff6d0043918
                                                                                                                                                                                                                  12⤵
                                                                                                                                                                                                                    PID:10468
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=1804,i,7729960577927990268,8624277848640108158,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=3080 /prefetch:11
                                                                                                                                                                                                                  11⤵
                                                                                                                                                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                  • System Time Discovery
                                                                                                                                                                                                                  PID:11808
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5848,i,14565899379335172085,4204821788433182129,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=5276 /prefetch:14
                                                                                                                                                                                                                  11⤵
                                                                                                                                                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                                                  PID:9404
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7808,i,12228073666391562365,12438752661431627571,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7828 /prefetch:14
                                                                                                                                                                                                                  11⤵
                                                                                                                                                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                                                  PID:9704
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7964,i,11153893026148222757,6822101936314649618,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7972 /prefetch:14
                                                                                                                                                                                                                  11⤵
                                                                                                                                                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                                                  PID:9932
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8216,i,4220609278051513432,18260615646521655403,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=5272 /prefetch:14
                                                                                                                                                                                                                  11⤵
                                                                                                                                                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                                                  PID:6480
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6576,i,5300966847522838994,2601411442786043787,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8160 /prefetch:14
                                                                                                                                                                                                                  11⤵
                                                                                                                                                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                                                  PID:1628
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:capital-one-cashback-protection=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6588,i,1704136964406139417,9226055819358224197,524288 --field-trial-handle=2776,i,14142568711790932662,5021505429687838186,262144 --enable-features=CapitalOneCashbackProtection,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2960,i,8797260065608950741,16891986874019614085,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8432 /prefetch:14
                                                                                                                                                                                                                  11⤵
                                                                                                                                                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                  PID:9808
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --edition=std-2 --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=132.0.5905.43 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --firstrunver=132.0.5905.43 --firstrunts=1782186748 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV9
                                                                                                                                                                                                                  11⤵
                                                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                                                  PID:11824
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff6d0043900,0x7ff6d004390c,0x7ff6d0043918
                                                                                                                                                                                                                    12⤵
                                                                                                                                                                                                                      PID:7036
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"
                                                                                                                                                                                                              8⤵
                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                              PID:6532
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\assistant\assistant_installer.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\assistant\assistant_installer.exe" --version
                                                                                                                                                                                                              8⤵
                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                              • Loads dropped DLL
                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                              PID:6764
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\assistant\assistant_installer.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x444b80,0x444b8c,0x444b98
                                                                                                                                                                                                                9⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                PID:5200
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                      PID:5312
                                                                                                                                                                                                      • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                                                                                                                                                                                                        "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                        PID:2584
                                                                                                                                                                                                        • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                                                                                                                                                                                                          "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Dfile.encoding=windows-1252 -jar C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                          PID:6620
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
                                                                                                                                                                                                            C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe -Dsun.java2d.uiScale.enabled=false -Xmx1536m -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack=true --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.time=ALL-UNNAMED --add-opens=java.desktop/java.awt=ALL-UNNAMED --add-opens=java.desktop/sun.awt.image=ALL-UNNAMED --add-opens=java.desktop/sun.java2d=ALL-UNNAMED --add-opens=java.desktop/java.awt.color=ALL-UNNAMED --add-opens=java.desktop/java.awt.image=ALL-UNNAMED --add-opens=java.desktop/com.apple.eawt=ALL-UNNAMED --add-opens=java.base/java.util.regex=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED --add-opens=java.desktop/java.beans=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.network=ALL-UNNAMED --add-opens=javafx.web/javafx.scene.web=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.event=ALL-UNNAMED -cp C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.268.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.268.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jackson-annotations-2.13.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jakarta.inject-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\java-image-scaling-0.8.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javax.annotation-api-1.3.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-api-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-core-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-impl-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jcl-over-slf4j-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-20230227.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jsr305-3.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-native-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-classic-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-core-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\lombok-1.18.30.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-api-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svn-commons-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svnexe-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\metrics-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\MinecraftServerPing-1.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\mockserver-netty-no-dependencies-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\modpack-dto-2.282.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\picture-bundle-3.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\plexus-utils-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\profiles-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\protocol-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\reactive-streams-1.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regexp-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regions-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\s3-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\sdk-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\skin-api-1.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\slf4j-api-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\statistics-dto-1.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\third-party-jackson-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\tlauncher-resource-1.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-lite-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\xz-1.9.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\original-TLauncher-2.9369.jar; org.tlauncher.tlauncher.rmo.TLauncher -starterConfig=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\starter.json -requireUpdate=false -currentAppVersion=2.9369 -starterDomainAvailabilityV1=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\domainAvailability.json -country=${country} "-starterJVM=C:\Program Files\Java\jre-1.8\bin\javaw.exe" -starterWorkingDirectory=C:\Users\Admin\Downloads -starterJarFile=C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe -starterFileEncoding=windows-1252 -runVersionWithServer=empty
                                                                                                                                                                                                            7⤵
                                                                                                                                                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                            • System Time Discovery
                                                                                                                                                                                                            • Checks processor information in registry
                                                                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                            PID:11536
                                                                                                                                                                                                            • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                                                              cmd.exe /C chcp 437 & wmic CPU get NAME
                                                                                                                                                                                                              8⤵
                                                                                                                                                                                                                PID:9372
                                                                                                                                                                                                                • C:\Windows\system32\chcp.com
                                                                                                                                                                                                                  chcp 437
                                                                                                                                                                                                                  9⤵
                                                                                                                                                                                                                    PID:9832
                                                                                                                                                                                                                  • C:\Windows\System32\Wbem\WMIC.exe
                                                                                                                                                                                                                    wmic CPU get NAME
                                                                                                                                                                                                                    9⤵
                                                                                                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                    PID:8820
                                                                                                                                                                                                                • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                                                                  cmd.exe /C chcp 437 & set processor
                                                                                                                                                                                                                  8⤵
                                                                                                                                                                                                                    PID:9456
                                                                                                                                                                                                                    • C:\Windows\system32\chcp.com
                                                                                                                                                                                                                      chcp 437
                                                                                                                                                                                                                      9⤵
                                                                                                                                                                                                                        PID:9012
                                                                                                                                                                                                                    • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                                                                      cmd.exe /C chcp 437 & dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt
                                                                                                                                                                                                                      8⤵
                                                                                                                                                                                                                        PID:9020
                                                                                                                                                                                                                        • C:\Windows\system32\chcp.com
                                                                                                                                                                                                                          chcp 437
                                                                                                                                                                                                                          9⤵
                                                                                                                                                                                                                            PID:10280
                                                                                                                                                                                                                          • C:\Windows\system32\dxdiag.exe
                                                                                                                                                                                                                            dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt
                                                                                                                                                                                                                            9⤵
                                                                                                                                                                                                                            • Drops file in System32 directory
                                                                                                                                                                                                                            • Checks SCSI registry key(s)
                                                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                            PID:9656
                                                                                                                                                                                                                        • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                                                                          cmd.exe /C chcp 437 & wmic qfe get HotFixID
                                                                                                                                                                                                                          8⤵
                                                                                                                                                                                                                            PID:7212
                                                                                                                                                                                                                            • C:\Windows\system32\chcp.com
                                                                                                                                                                                                                              chcp 437
                                                                                                                                                                                                                              9⤵
                                                                                                                                                                                                                                PID:10832
                                                                                                                                                                                                                              • C:\Windows\System32\Wbem\WMIC.exe
                                                                                                                                                                                                                                wmic qfe get HotFixID
                                                                                                                                                                                                                                9⤵
                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                PID:10220
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6024,i,6361777454612277274,18255935979028228492,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:2484
                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6480,i,16387376961840350477,7328160557356343864,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:14
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:4776
                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6584,i,3604488514881570568,8291318859162223331,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:1
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:4340
                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6772,i,6565566526691554048,3680045495579595377,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:14
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:1552
                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6540,i,7541412417931669712,3926404620374404871,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:1
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:6272
                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7052,i,14535824715329957759,11764274408881471391,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:1
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:2604
                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3564,i,8216573061545024806,2573952042100277736,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:2008
                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=4452,i,8739823489791697052,13032702458647829025,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:1
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:8184
                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=3708,i,17237311307080533063,16379327334788381631,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:1
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:2504
                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6684,i,922610882821867714,2681070046028432065,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:1
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:1668
                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3580,i,7059849161732434575,4536900940461086696,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:14
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:7780
                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6628,i,17378642197369231037,474385450731843305,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:1
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:1316
                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7204,i,12379745708997988659,1647960875446609117,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=7216 /prefetch:14
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:8156
                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7356,i,74034288359444433,1227185057492478872,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6984 /prefetch:1
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                              PID:2752
                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=6052,i,14803949911324493525,414646389753048687,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:1
                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                PID:6960
                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6780,i,10512517673561866739,14105674426829702731,262144 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:10
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                PID:6132
                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=6956,i,7593556673225983092,3408879089436606266,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:1
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:8136
                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6476,i,13720231915973751578,16255585814810015507,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                    PID:5548
                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6920,i,12950458577414444574,11345289208495294684,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:12
                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                      PID:2988
                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=7060,i,10367973286963958265,4378671574528222449,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:1
                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                        PID:8384
                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=5428,i,2177831322592740833,18177630499749230569,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:1
                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                          PID:3728
                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4452,i,431932578890489692,94984789599949608,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:14
                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                            PID:8788
                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5696,i,3377426423363626677,7842343122282273361,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14
                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                              PID:11720
                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7356,i,1587069422276520086,5256771012651676488,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:1
                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                PID:10716
                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6908,i,11635145182889539914,6356346511583102278,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:14
                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                  PID:11780
                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=6052,i,16330495400197755885,13710324925858359020,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:1
                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                    PID:10012
                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=5832,i,8642228481853069662,6591261015192420827,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:1
                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                      PID:9748
                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=6764,i,13818343456407885362,9326070760824764452,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:1
                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                        PID:2000
                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=6336,i,7982206499082373582,11938209128524060892,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:1
                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                          PID:5904
                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=5712,i,16340158133272361848,5381246025773701856,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:1
                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                            PID:5620
                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=5720,i,15370332505878772226,12170094814113869940,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:1
                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                              PID:2100
                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6796,i,17992059538443042830,14479903755908522278,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:14
                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                PID:7256
                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=3632,i,582283088540124700,11607985401850415017,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:1
                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                  PID:10696
                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6056,i,10632458180978158410,3726260602557095655,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14
                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                    PID:6712
                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=7416,i,16703366124144490031,4098360179658270945,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                      PID:9424
                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=5348,i,4220064649489644057,17641275859133468857,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:1
                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                        PID:10184
                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=6828,i,8841993893958483260,3628481421671171168,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=7444 /prefetch:1
                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                          PID:5416
                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=7432,i,493980929935238824,13838665496147650867,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:1
                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                            PID:6856
                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7504,i,3333078180893845460,1282121671173975338,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:14
                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                              PID:7076
                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=3468,i,932823652207288619,10835733747516002480,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:1
                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                PID:9004
                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6200,i,9504368774742858014,2781178118825523838,524288 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:14
                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                  PID:8692
                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7080,i,6476485135975765976,6234412100897758701,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:1
                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                    PID:2408
                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=5764,i,4935661906622139979,17407973033380064314,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                      PID:9192
                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=7008,i,2875258878824369912,9418899352210820406,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3232 /prefetch:1
                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                        PID:4516
                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=6796,i,783498694787618818,2329429306564366361,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:1
                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                          PID:7588
                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=5780,i,12503603506892379296,1643158366844155566,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                            PID:11096
                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=6828,i,15175624607635186132,5773400422164574706,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=7380 /prefetch:1
                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                              PID:1000
                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=7432,i,4808901499752872790,4540041973126774788,2097152 --field-trial-handle=1848,i,3985899843397641034,623768992869739925,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                PID:7184
                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                PID:7108
                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                  PID:2036
                                                                                                                                                                                                                                                                                                                • C:\Windows\System32\GameBarPresenceWriter.exe
                                                                                                                                                                                                                                                                                                                  "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                  • Network Service Discovery
                                                                                                                                                                                                                                                                                                                  PID:5392
                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                  PID:3120
                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                  • Drops desktop.ini file(s)
                                                                                                                                                                                                                                                                                                                  • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                  PID:4548
                                                                                                                                                                                                                                                                                                                • C:\Windows\System32\oobe\UserOOBEBroker.exe
                                                                                                                                                                                                                                                                                                                  C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                  • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                  PID:7696
                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                  PID:1496
                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                  • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                  PID:4640
                                                                                                                                                                                                                                                                                                                • C:\Windows\System32\svchost.exe
                                                                                                                                                                                                                                                                                                                  C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                  • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                  • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                  PID:3860
                                                                                                                                                                                                                                                                                                                • C:\Windows\System32\GameBarPresenceWriter.exe
                                                                                                                                                                                                                                                                                                                  "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                  • Network Service Discovery
                                                                                                                                                                                                                                                                                                                  PID:6392
                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                  PID:7016
                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                  • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                  PID:6132
                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                                                                                                                                                  PID:8412
                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7fffae394ff0,0x7fffae395000,0x7fffae395010
                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                    PID:8532
                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                    PID:3504
                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                    C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                    • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                    PID:9472
                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                                                                                                                                                                                    PID:12272
                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff6d0043900,0x7ff6d004390c,0x7ff6d0043918
                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                        PID:11736
                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                      • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                      PID:10060
                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                      • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                      PID:7284
                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                        PID:11748
                                                                                                                                                                                                                                                                                                                      • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                                                                                                                                                                                                                                        \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                          PID:8840

                                                                                                                                                                                                                                                                                                                        Network

                                                                                                                                                                                                                                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                              Reconnaissance

                                                                                                                                                                                                                                                                                                                              Resource Development

                                                                                                                                                                                                                                                                                                                              Initial Access

                                                                                                                                                                                                                                                                                                                              Execution

                                                                                                                                                                                                                                                                                                                              Persistence

                                                                                                                                                                                                                                                                                                                              Boot or Logon Autostart Execution

                                                                                                                                                                                                                                                                                                                              2
                                                                                                                                                                                                                                                                                                                              T1547

                                                                                                                                                                                                                                                                                                                              Active Setup

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1547.014

                                                                                                                                                                                                                                                                                                                              Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1547.001

                                                                                                                                                                                                                                                                                                                              Event Triggered Execution

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1546

                                                                                                                                                                                                                                                                                                                              Component Object Model Hijacking

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1546.015

                                                                                                                                                                                                                                                                                                                              Privilege Escalation

                                                                                                                                                                                                                                                                                                                              Boot or Logon Autostart Execution

                                                                                                                                                                                                                                                                                                                              2
                                                                                                                                                                                                                                                                                                                              T1547

                                                                                                                                                                                                                                                                                                                              Active Setup

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1547.014

                                                                                                                                                                                                                                                                                                                              Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1547.001

                                                                                                                                                                                                                                                                                                                              Event Triggered Execution

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1546

                                                                                                                                                                                                                                                                                                                              Component Object Model Hijacking

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1546.015

                                                                                                                                                                                                                                                                                                                              Defense Evasion

                                                                                                                                                                                                                                                                                                                              Modify Registry

                                                                                                                                                                                                                                                                                                                              3
                                                                                                                                                                                                                                                                                                                              T1112

                                                                                                                                                                                                                                                                                                                              Credential Access

                                                                                                                                                                                                                                                                                                                              Credentials from Password Stores

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1555

                                                                                                                                                                                                                                                                                                                              Credentials from Web Browsers

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1555.003

                                                                                                                                                                                                                                                                                                                              Unsecured Credentials

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1552

                                                                                                                                                                                                                                                                                                                              Credentials In Files

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1552.001

                                                                                                                                                                                                                                                                                                                              Discovery

                                                                                                                                                                                                                                                                                                                              Browser Information Discovery

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1217

                                                                                                                                                                                                                                                                                                                              Network Service Discovery

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1046

                                                                                                                                                                                                                                                                                                                              Peripheral Device Discovery

                                                                                                                                                                                                                                                                                                                              2
                                                                                                                                                                                                                                                                                                                              T1120

                                                                                                                                                                                                                                                                                                                              Query Registry

                                                                                                                                                                                                                                                                                                                              6
                                                                                                                                                                                                                                                                                                                              T1012

                                                                                                                                                                                                                                                                                                                              System Information Discovery

                                                                                                                                                                                                                                                                                                                              5
                                                                                                                                                                                                                                                                                                                              T1082

                                                                                                                                                                                                                                                                                                                              System Location Discovery

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1614

                                                                                                                                                                                                                                                                                                                              System Language Discovery

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1614.001

                                                                                                                                                                                                                                                                                                                              System Network Configuration Discovery

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1016

                                                                                                                                                                                                                                                                                                                              Internet Connection Discovery

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1016.001

                                                                                                                                                                                                                                                                                                                              System Time Discovery

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1124

                                                                                                                                                                                                                                                                                                                              Lateral Movement

                                                                                                                                                                                                                                                                                                                              Collection

                                                                                                                                                                                                                                                                                                                              Data from Local System

                                                                                                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                                                                                                              T1005

                                                                                                                                                                                                                                                                                                                              Command and Control

                                                                                                                                                                                                                                                                                                                              Exfiltration

                                                                                                                                                                                                                                                                                                                              Impact

                                                                                                                                                                                                                                                                                                                              Replay Monitor

                                                                                                                                                                                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                              Downloads

                                                                                                                                                                                                                                                                                                                              ActiveSkin.ocx
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\ActiveSkin.ocx
                                                                                                                                                                                                                                                                                                                              • Size 336KB
                                                                                                                                                                                                                                                                                                                              • SHA256 2c8f92dc16cbf13542ddd3bf0a947cf84b00fed83a7124b830ddefa92f939877
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Bonzi's Beach Checkers.exe
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\Bonzi's Beach Checkers.exe
                                                                                                                                                                                                                                                                                                                              • Size 7.8MB
                                                                                                                                                                                                                                                                                                                              • SHA256 821a16b65f68e745492419ea694f363926669ac16f6b470ed59fe5a3f1856fcb
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              BonziBDY_2.EXE
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\BonziBDY_2.EXE
                                                                                                                                                                                                                                                                                                                              • Size 796KB
                                                                                                                                                                                                                                                                                                                              • SHA256 1e2994763a7674a0f1ec117dae562b05b614937ff61c83b316b135afab02d45a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              BonziBDY_35.EXE
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE
                                                                                                                                                                                                                                                                                                                              • Size 2.5MB
                                                                                                                                                                                                                                                                                                                              • SHA256 88c03817ae8dfc5fc9e6ffd1cfb5b829924988d01cd472c1e64952c5398866e8
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              BonziBDY_4.EXE
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE
                                                                                                                                                                                                                                                                                                                              • Size 3.2MB
                                                                                                                                                                                                                                                                                                                              • SHA256 5678fd744faddb30a87568ae309066ef88102a274fff62f10e4963350da373bc
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              BonziCheckers.ocx
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\BonziCheckers.ocx
                                                                                                                                                                                                                                                                                                                              • Size 152KB
                                                                                                                                                                                                                                                                                                                              • SHA256 9028075603c66ca2e906ecac3275e289d8857411a288c992e8eef793ed71a75b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              page17.jpg
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page17.jpg
                                                                                                                                                                                                                                                                                                                              • Size 50KB
                                                                                                                                                                                                                                                                                                                              • SHA256 473a890da22defb3fbd643246b3fa0d6d34939ac469cd4f48054ee2a0bc33d82
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              page18.jpg
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page18.jpg
                                                                                                                                                                                                                                                                                                                              • Size 45KB
                                                                                                                                                                                                                                                                                                                              • SHA256 03f269cd40809d7ec94f5fa4fff1033a624e849179962693cdc2c37d7904233b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              MSCOMCTL.OCX
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\MSCOMCTL.OCX
                                                                                                                                                                                                                                                                                                                              • Size 1.0MB
                                                                                                                                                                                                                                                                                                                              • SHA256 3b6ccdb560d7cd4748e992bd82c799acd1bbcfc922a13830ca381d976ffcccaf
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              MSINET.OCX
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\MSINET.OCX
                                                                                                                                                                                                                                                                                                                              • Size 112KB
                                                                                                                                                                                                                                                                                                                              • SHA256 73da54b69911bdd08ea8bbbd508f815ef7cfa59c4684d75c1c602252ec88ee31
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              MSWINSCK.OCX
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\MSWINSCK.OCX
                                                                                                                                                                                                                                                                                                                              • Size 105KB
                                                                                                                                                                                                                                                                                                                              • SHA256 bf7e47c16d7e1c0e88534f4ef95e09d0fd821ed1a06b0d95a389b35364b63ff5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Reg.nbd
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\Reg.nbd
                                                                                                                                                                                                                                                                                                                              • Size 140B
                                                                                                                                                                                                                                                                                                                              • SHA256 375ecd89ee18d7f318cf73b34a4e15b9eb16bc9d825c165e103db392f4b2a68b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Reg.nbd
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\Reg.nbd
                                                                                                                                                                                                                                                                                                                              • Size 99B
                                                                                                                                                                                                                                                                                                                              • SHA256 56010f4c8f146425eb326c79cbad23367301e6a3bc1e91fdcd671ce9f5fc4b63
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Regicon.ocx
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\Regicon.ocx
                                                                                                                                                                                                                                                                                                                              • Size 76KB
                                                                                                                                                                                                                                                                                                                              • SHA256 07e91d8ed149d5cd6d48403268a773c664367bce707a99e51220e477fddeeb42
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              CheckRuntimes.bat
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat
                                                                                                                                                                                                                                                                                                                              • Size 279B
                                                                                                                                                                                                                                                                                                                              • SHA256 8ae1ed38bc650db8b14291e1b7298ee7580b31e15f8a6a84f78f048a542742ff
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              MSAGENT.EXE
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE
                                                                                                                                                                                                                                                                                                                              • Size 391KB
                                                                                                                                                                                                                                                                                                                              • SHA256 16ca09ad70561f413376ad72550ae5664c89c6a76c85c872ffe2cb1e7f49e2aa
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              tv_enua.exe
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe
                                                                                                                                                                                                                                                                                                                              • Size 997KB
                                                                                                                                                                                                                                                                                                                              • SHA256 709936902951fb684d0a03a561fb7fd41c5e6f81ecd60d326809db66eb659331
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              SSCALA32.OCX
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\SSCALA32.OCX
                                                                                                                                                                                                                                                                                                                              • Size 472KB
                                                                                                                                                                                                                                                                                                                              • SHA256 8e52ef01139dc448d1efd33d1d9532f852a74d05ee87e8e93c2bb0286a864e13
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              SSCALB32.OCX
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\SSCALB32.OCX
                                                                                                                                                                                                                                                                                                                              • Size 320KB
                                                                                                                                                                                                                                                                                                                              • SHA256 5db33895923b7af9769ca08470d0462ed78eec432a4022ff0acc24fa2d4666e1
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Uninstall.exe
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\Uninstall.exe
                                                                                                                                                                                                                                                                                                                              • Size 65KB
                                                                                                                                                                                                                                                                                                                              • SHA256 2288f4f42373affffbaa63ce2fda9bb071fd7f14dbcd04f52d3af3a219b03485
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssa3d30.ocx
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\ssa3d30.ocx
                                                                                                                                                                                                                                                                                                                              • Size 320KB
                                                                                                                                                                                                                                                                                                                              • SHA256 7a0418b76d00665a71d13a30d838c3e086304bacd10d764650d2a5d2ec691008
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              sstabs2.ocx
                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\BonziBuddy432\sstabs2.ocx
                                                                                                                                                                                                                                                                                                                              • Size 288KB
                                                                                                                                                                                                                                                                                                                              • SHA256 596f3235642c9c968650194065850ecb02c8c524d2bdcaf6341a01201e0d69be
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
                                                                                                                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                                                                                                                              • SHA256 5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
                                                                                                                                                                                                                                                                                                                              • Size 64KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4d4dfe2d571b2fb692a311daea5ad9fad6e7ee22f716691a05539075e63d33c3
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                                                                                                                                                                                                                                                                                                                              • Size 4B
                                                                                                                                                                                                                                                                                                                              • SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
                                                                                                                                                                                                                                                                                                                              • Size 960B
                                                                                                                                                                                                                                                                                                                              • SHA256 dae63549d23b9f08ebb27d21f1e35b864f600d844bd96873644805f120bb745d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              settings.dat
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                              • Size 40B
                                                                                                                                                                                                                                                                                                                              • SHA256 316e10ff82c86a25d6be942baf5cf0a0c4782bbda529abcb8bb437668056b0da
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              3a9dd708-0770-4ee1-bf7e-a2bd8e128db9.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\3a9dd708-0770-4ee1-bf7e-a2bd8e128db9.tmp
                                                                                                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                                                                                                              • SHA256 12992408d1e77aa847dd8bcf626a41abb69123e736fe559154b64dcc42ccef96
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                              • Size 6B
                                                                                                                                                                                                                                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000030
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030
                                                                                                                                                                                                                                                                                                                              • Size 375KB
                                                                                                                                                                                                                                                                                                                              • SHA256 431a3251deb71c9c6d19db7ece22c26583f9d8fdba96fdfbb6a5b27d4214e31f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000039
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039
                                                                                                                                                                                                                                                                                                                              • Size 38KB
                                                                                                                                                                                                                                                                                                                              • SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_00003b
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003b
                                                                                                                                                                                                                                                                                                                              • Size 81KB
                                                                                                                                                                                                                                                                                                                              • SHA256 01c6148ba83cc25b55c59338822a1e48079c55511a8b2af38415bcac379a9a03
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_00003c
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003c
                                                                                                                                                                                                                                                                                                                              • Size 512KB
                                                                                                                                                                                                                                                                                                                              • SHA256 8e50d07f34daca6b8e3815384d8f033c89c0f81f4b53c3245ac4b5d0c9dae77e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_00003e
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e
                                                                                                                                                                                                                                                                                                                              • Size 60KB
                                                                                                                                                                                                                                                                                                                              • SHA256 f31aaefb9ae59b8834a8d4e26a12cbdbc5735920d589314d1e7499aacc92eebe
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_00003f
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f
                                                                                                                                                                                                                                                                                                                              • Size 69KB
                                                                                                                                                                                                                                                                                                                              • SHA256 7671a2ce3e97122ecb3282cf6fdda12ae933b15fc9773fb5c24bf7f816e5fad5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000040
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000040
                                                                                                                                                                                                                                                                                                                              • Size 48KB
                                                                                                                                                                                                                                                                                                                              • SHA256 9b66a071ccbc4f362f9228086d94ca0512d3054a76a08b43a7164cfc8f7afc89
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000041
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000041
                                                                                                                                                                                                                                                                                                                              • Size 95KB
                                                                                                                                                                                                                                                                                                                              • SHA256 968b8e27679b37d5cd8defd3e00bf9c96ba4e14f2a3e80513b6f538ade00606f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000042
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042
                                                                                                                                                                                                                                                                                                                              • Size 22KB
                                                                                                                                                                                                                                                                                                                              • SHA256 5eec5d1f3ab7735e30dd381e9a065e90d36a9036b290e2a432fa22a56acac636
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000058
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000058
                                                                                                                                                                                                                                                                                                                              • Size 398KB
                                                                                                                                                                                                                                                                                                                              • SHA256 097ef8326465496982d3288004d4ec0f49f5d2002150b1ee2aa1ec7c82c28d62
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000063
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000063
                                                                                                                                                                                                                                                                                                                              • Size 57KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6303475cdd19a7c08d011c6c6862e3789b39f95797602963a78cac17ff73d1e5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000064
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000064
                                                                                                                                                                                                                                                                                                                              • Size 49KB
                                                                                                                                                                                                                                                                                                                              • SHA256 bfcab14ee2c7216e6ccfab76a23437168225e1d14125508b851f225a8cc01acd
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000065
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000065
                                                                                                                                                                                                                                                                                                                              • Size 141KB
                                                                                                                                                                                                                                                                                                                              • SHA256 5d15e9c0ec54e87c4a841015fa57b8354996f4bf4ac78750e4fecf2bea60cac4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000066
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000066
                                                                                                                                                                                                                                                                                                                              • Size 39KB
                                                                                                                                                                                                                                                                                                                              • SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000067
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000067
                                                                                                                                                                                                                                                                                                                              • Size 445KB
                                                                                                                                                                                                                                                                                                                              • SHA256 1cce3d06ccc52cbf3687aacd3463348b04e60f0696f515035b2a5822acfe2976
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000068
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000068
                                                                                                                                                                                                                                                                                                                              • Size 21KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ab2cc422cfdf0b2ccf3adbc95a81d87a3259a0493aac1f69aad663a05116161c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000069
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000069
                                                                                                                                                                                                                                                                                                                              • Size 197KB
                                                                                                                                                                                                                                                                                                                              • SHA256 0f9fb9110b88d9183f15a3fb539560de44defe4af8c83a85775100a9bfd329c9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_00006b
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006b
                                                                                                                                                                                                                                                                                                                              • Size 23KB
                                                                                                                                                                                                                                                                                                                              • SHA256 a17a73b5a6bc57d41315e062394a822700c0bd618460cdf83681841e8844bef6
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_00006e
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006e
                                                                                                                                                                                                                                                                                                                              • Size 26KB
                                                                                                                                                                                                                                                                                                                              • SHA256 978f42c67e13264cdc6d1084dff0e5353f38e008593b885532cbfaa33cf234ff
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              f_000097
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000097
                                                                                                                                                                                                                                                                                                                              • Size 57KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3eaa45a9e64d7f33355dceba3f64b71f33698b53e8cb1d6c10e249063fa0f882
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              0017f12a367b1668_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0017f12a367b1668_0
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 03899a6c247403babc4c9a5c83a076b97af44dcf26e9f72e4ca481080caea3b9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              0f625bc282047dc9_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0f625bc282047dc9_0
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 64967a2b284b84fdc92f22ac2b2cf0b8844fc00f5d9a0cc5a2c1970f4c8f94c3
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              1d2d7894e7d7d479_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1d2d7894e7d7d479_0
                                                                                                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                                                                                                              • SHA256 804149925edd4176ffecac76231dec6465e70e212b8bace22dc83863e877b998
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              28eca9d73a52f8d1_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\28eca9d73a52f8d1_0
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 5562a75f564ef9fb7125e87e1bfa6964aa347b7123238fb1ac672da73fb64d4b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              2d98b1ed20606b5d_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2d98b1ed20606b5d_0
                                                                                                                                                                                                                                                                                                                              • Size 305KB
                                                                                                                                                                                                                                                                                                                              • SHA256 71700612948f15a44a1adf41e77d1de4ac9c05db568442164477f82e112c4c43
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              5898fb55aac42b31_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5898fb55aac42b31_0
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 13afc053c2181f9ce7e9d369746658b69ba872254d4d2954532bcc4ec794a6c3
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              6ddc9dda8c36f4d1_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6ddc9dda8c36f4d1_0
                                                                                                                                                                                                                                                                                                                              • Size 241KB
                                                                                                                                                                                                                                                                                                                              • SHA256 8b0e7b87a914881c3af0e508ddde59f5a2845c6c3f922c351a24b1a6c6f33d2b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              749dd5b31d39f89f_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\749dd5b31d39f89f_0
                                                                                                                                                                                                                                                                                                                              • Size 352B
                                                                                                                                                                                                                                                                                                                              • SHA256 8dd8061380386af86b658610de1d3735dd7e466162c5e29aa16be4b646ec901b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              7a587f83059074bd_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7a587f83059074bd_0
                                                                                                                                                                                                                                                                                                                              • Size 305B
                                                                                                                                                                                                                                                                                                                              • SHA256 3d5bc953d1cc934a5c1d00da114b15d0de65efd287eb28bada54334107a73956
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              9281735ff999f3a7_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9281735ff999f3a7_0
                                                                                                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                                                                                                              • SHA256 9816e862abd6ce4298722c51476b247b0e00150561a64f4ea8d4776916f42299
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              94362d5dd3e99e82_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\94362d5dd3e99e82_0
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 143fd8baedcf2ae65791bb7265ec28c2bfc3e6d1208e6296a1f64f6724a74c13
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              9e78fc7137412f71_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9e78fc7137412f71_0
                                                                                                                                                                                                                                                                                                                              • Size 486KB
                                                                                                                                                                                                                                                                                                                              • SHA256 559cf37290cb9b22bc8cb3eef5a548563af9af02b0cef72982f24cc026a5f24d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              a0c689cfa568fe15_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a0c689cfa568fe15_0
                                                                                                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4d4972a9ab0965ad0db609ba2003d95859ba3a9f5e0b1ffc465afa12e39d8f65
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              a8db7ddc1adb7447_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a8db7ddc1adb7447_0
                                                                                                                                                                                                                                                                                                                              • Size 280B
                                                                                                                                                                                                                                                                                                                              • SHA256 3282cc98301702dd933de8443c80ad27c507ac41c20077f7e7db69b96d9882f0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              b190195875af43fc_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b190195875af43fc_0
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 a43b6380f5f21c409476fe4349957503e6ce775614c1804b725f7f7305f55717
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              b43bf70326fce722_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b43bf70326fce722_0
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 f6b4682925bd79297593843fd3e625d4da86bb7b2be335faa1aa8490a6641cdc
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              b6600dc4bb0569f7_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b6600dc4bb0569f7_0
                                                                                                                                                                                                                                                                                                                              • Size 4.1MB
                                                                                                                                                                                                                                                                                                                              • SHA256 6198d47eca413671a8853e85094693d0bfa7498cb31b83eeff0601799b5c5186
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              d56ee80156ca9fba_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d56ee80156ca9fba_0
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 b4f7abaecc42e2b6b83d0d0b911488149c52759fbc2d494a48de5aa11f0fe8c1
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              d8945a1d64d31087_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d8945a1d64d31087_0
                                                                                                                                                                                                                                                                                                                              • Size 58KB
                                                                                                                                                                                                                                                                                                                              • SHA256 a3da49194859bfdce0c6fd945c0509d0ed9bf29b6aa12c22ca26d5029493547a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              e4f6f9e4c3c2b1b5_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e4f6f9e4c3c2b1b5_0
                                                                                                                                                                                                                                                                                                                              • Size 23KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3adca3286b7cc32324afcf0b6365b1a81d9a4bb027beacacbb6599437d745e8f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 192B
                                                                                                                                                                                                                                                                                                                              • SHA256 ddae3d472962ca427a61952c19b409b8e8ad11364b6309443b77d586073466d2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4bc679f63d4eb6eb9363bf0967ddd41182e497d5ac200ee0a270e713638e00c0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 467a7580fbe35da2e16d093991d00f19261bbf562ed6bec17c5764ce9bf5373b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                                                                                                                              • SHA256 f8d4092bd5a8c7335ae7ac0ecd21ccda60f764251f83dde3c1f55087c9c2e823
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 b737ee0b3fe835cb986dbe8df17d271f8b7f9c70c6964477c410804686393ee5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                                                                                                                              • SHA256 154830949fba490f246353cef724d3aaff759725f37c7f45c21a6f0a79332bb0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 840B
                                                                                                                                                                                                                                                                                                                              • SHA256 2e8517bb107a5abeb51265f230e155429236e8c05089ab7bd44a2659ab299e04
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 912B
                                                                                                                                                                                                                                                                                                                              • SHA256 982f8f4200fb41a07b46b4dc3ecf1a6a1ef82e9c12e70329681abc6a6d5606e2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3f2bfef552ff36e8f0d7129bf42817ac37456fa398ec01b7df9eca654699ce0d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              messages.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
                                                                                                                                                                                                                                                                                                                              • Size 593B
                                                                                                                                                                                                                                                                                                                              • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              craw_background.js
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                                                                                                                                                                                                                                                                                              • Size 531KB
                                                                                                                                                                                                                                                                                                                              • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              CURRENT
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
                                                                                                                                                                                                                                                                                                                              • Size 16B
                                                                                                                                                                                                                                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              MANIFEST-000001
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                              • Size 41B
                                                                                                                                                                                                                                                                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ee1bbd758134603ded90e54a8b9c0360a0e3b7c71e74c51043b75c7d2461a5a6
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                                                                                                              • SHA256 633c50cc8df77fc0db30e63f863e633e66083c088532955e49b265f21fb77533
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Size 22KB
                                                                                                                                                                                                                                                                                                                              • SHA256 7f94c2856b644297d62cb37f42da0169ded2aa325eeb1668ca9c570b80cb93ee
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Size 20KB
                                                                                                                                                                                                                                                                                                                              • SHA256 9ee5c828de17e55f4b243bd9138ffa4c780c43803fdab8e1e2ed1e0ae086f685
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6eaf4cde28d8755864fd8475bafd597e317aa233b9ff0e514599664cb78c4746
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                              • Size 2B
                                                                                                                                                                                                                                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              TransportSecurity
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                                                                                                                                                              • Size 858B
                                                                                                                                                                                                                                                                                                                              • SHA256 2dd16c10dc06b36249021a1969106fafc5a83f0926a4e8a7972cfbd9a8d8dd85
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 f5c8209eabb57a3d40f9e31006a9e6908c8462bfbcf63cd940a19600305f3870
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 44f9eded6df2f2ce4e9be067692d8ed5a6663c86bfd59ab6d516ba69956885e4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                                                                                                              • SHA256 7afb2d84eeb787cb552bc9847502e60423b47ef7c9b402cbf5412cbf2c6195eb
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                                                                                                              • SHA256 990fdf6a1999e40a5e14063dff60b2ebaf4b63d6873721493b190aeff23d17c2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 44f17afdd4d3cfa518c55d43457554ec35bbbf1838ef61e88e16ecbcfc5378c9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 11478efbf2eae9706140fbcfbae4bab6b7b4e14a38b4ff745d57e1baab897e79
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 665797fae5196b08ea8e6155cec57fa1766a290ed170fc25e5997913b33799b1
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 a3d18282f76b8913595aa498c53fcf12051c1a556bf26918b6a427564b069509
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 971b6bc83ef8497755e4b61b3df25ec0bc3fbba9f81e098460e4d0d4187cb84b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 19439d0dab86046ec890253ba13e6652f91f77db8bb9a92fe8a6ac9d6159ff58
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4277cbc737936f5c0d9e4aac263b3612bb09020339ae826fe9c2e95c3fc1f0d6
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ef41883576fff0620d2396aded61feb8e977128bc93b7ef0e695542636e9e64b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d3f257a4e5387ec2cc5c3c68a53dce50bce0e0b0cee6074a152bd98366781904
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ea824157b13c55517c465d4ff4359a22b200ae143f5a5f23a379eb18c588d5e6
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                                                                                                              • SHA256 09197c0c7b8b494c71872aff7ebc3e2a97fb1779c87c7841a988a074dfffca50
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                                                                                                              • SHA256 658a79c961a35f12917cefc5cf0723ad0cd783204de30e2321ec2680c443c266
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ce4e6e6ed327834e55f46aa66e5453ca6de919b76e247a9a418596b1b467fd1b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                                                                                                              • SHA256 15a3e2e47e6e46a76442f3bce0c45e888b3df6c47856e97927caf1515a6d25f5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3dd90a763c1b63910f777931d164ad6d49b7dca6cf60d0862130da192458ae4a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e17c12cdde396b8480e73f77897f8f189f5b83f4bdf34290f4524c0038bb9896
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                                                                                                              • SHA256 79e239a94e7eae444d895228d7a844ccdb6d9c9e33eb5c87c3843ebb087ba04c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ffc239c876895c5f00fcf95d2a926bc7fee06683614b1dbf66199e67495405d4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              dark_logo
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Search Logos\dark_logo
                                                                                                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                                                                                                              • SHA256 b50d5a1819d5750116692fbc2d84aa7da7bcad565289b868ad5594970e8b3641
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              logo
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Search Logos\logo
                                                                                                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                                                                                                              • SHA256 29f6300c243e7df4cbf0d5a85a3fefbee35f27512f45ea69e60bfbbb93303a29
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 120B
                                                                                                                                                                                                                                                                                                                              • SHA256 b3cc33b1528debf7d46e9a52138300348f868fb18e647d20ccc3adf3cef84dde
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              4dcccd147347055e_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\4dcccd147347055e_0
                                                                                                                                                                                                                                                                                                                              • Size 255KB
                                                                                                                                                                                                                                                                                                                              • SHA256 018d60a734729062671ef2350f2220f7b20adf2350a4b486bcc7c238ccf4b354
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 120B
                                                                                                                                                                                                                                                                                                                              • SHA256 a6700aefe33acf28c5990dac097e1cc5925662a06916469acb3364ffde2759c9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 72B
                                                                                                                                                                                                                                                                                                                              • SHA256 4f9ac9d09ecea49ade619f02fac51c67accfac30e8f6d5441c8e744941170426
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 72B
                                                                                                                                                                                                                                                                                                                              • SHA256 dc5e7debb19916b15218c1a7d28aae93d691d67c36eeec8f8db49e03e212f7f0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index~RFe5d514f.TMP
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe5d514f.TMP
                                                                                                                                                                                                                                                                                                                              • Size 48B
                                                                                                                                                                                                                                                                                                                              • SHA256 e008cb9d0c8052e2e30128d150894b66d720b65e0d3b6e654928b6cc06dfca69
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              data_0
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              data_2
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              data_3
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\dfc91413-f5e6-4e74-9799-213ac0b83c1f\index
                                                                                                                                                                                                                                                                                                                              • Size 24B
                                                                                                                                                                                                                                                                                                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\dfc91413-f5e6-4e74-9799-213ac0b83c1f\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 48B
                                                                                                                                                                                                                                                                                                                              • SHA256 e93176c9a625db801dfd17c4800517c56d5bd39a03b70306e057cb65c566c565
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              index.txt
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                                                                                                                                                                                                                                                                                                              • Size 234B
                                                                                                                                                                                                                                                                                                                              • SHA256 a5f7171e5eb56c24491a2a5a00fa4d2ead22f9ff93751ee080eadcd0a1d1d1f7
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              index.txt
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                                                                                                                                                                                                                                                                                                              • Size 150B
                                                                                                                                                                                                                                                                                                                              • SHA256 b136b078299a4db79ee7ecc5a2487d13489b8641db69c8adf746377f2a1d85ce
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              index.txt~RFe5f172b.TMP
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5f172b.TMP
                                                                                                                                                                                                                                                                                                                              • Size 157B
                                                                                                                                                                                                                                                                                                                              • SHA256 03af081dd7d3b671c24899b2b97c144c54ac028af447677125f942fc3ffbcf84
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              000003.log
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\000003.log
                                                                                                                                                                                                                                                                                                                              • Size 37KB
                                                                                                                                                                                                                                                                                                                              • SHA256 10fdc7930b389cf26d671616adb5c7880da87d4dfea4dba5c3ae9697ac05cd9f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              LOG
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\LOG
                                                                                                                                                                                                                                                                                                                              • Size 370B
                                                                                                                                                                                                                                                                                                                              • SHA256 0e7e39e2709040d8f35131a4ba5ea533e22c3cb08795dc4317f882730c10a934
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              LOG
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\LOG
                                                                                                                                                                                                                                                                                                                              • Size 370B
                                                                                                                                                                                                                                                                                                                              • SHA256 e29b03b1a6c5ae3c647add5ae094810e9dc1ee64cee128093d922c39ae49634c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              LOG.old
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\LOG.old
                                                                                                                                                                                                                                                                                                                              • Size 329B
                                                                                                                                                                                                                                                                                                                              • SHA256 8ffd7e8e15c1b43fed69a556d80c858a7cef029a52ea0a1130ed3d186387eb51
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              MANIFEST-000001
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                              • Size 23B
                                                                                                                                                                                                                                                                                                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              be35c200-abbc-433f-b276-4748fa482d72.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\be35c200-abbc-433f-b276-4748fa482d72.tmp
                                                                                                                                                                                                                                                                                                                              • Size 414B
                                                                                                                                                                                                                                                                                                                              • SHA256 79e390f1bfa6429f29af7b9446ebfaceafbc411d8438ad449e72705206c9fbb0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 135KB
                                                                                                                                                                                                                                                                                                                              • SHA256 23f93b07c7fe77c791b9cdce67bfc356c9167e3bf98bf6e3e0ac83f1480a158b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 6KB
                                                                                                                                                                                                                                                                                                                              • SHA256 10ab735fafe15843416d567f85c84c996ac03fdd3df926183ce30d7dd5e025e0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 6KB
                                                                                                                                                                                                                                                                                                                              • SHA256 bc7778bc370f19348c5322d68033f6942f145603fb07dd54c9e154465a592b3c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 124KB
                                                                                                                                                                                                                                                                                                                              • SHA256 a0ad9ce02c5ced347321fc904efc7dd57caf35b189ff1afe16aaf950613f2b02
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 124KB
                                                                                                                                                                                                                                                                                                                              • SHA256 81703b6c16ca00742b88278b4b7b40b0d09bfdcf0475f277fdc85813d3bd0850
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 124KB
                                                                                                                                                                                                                                                                                                                              • SHA256 285b4805a0eff3787ac28b3f9a374973c0f84e7350d59b74736189d345b4de6d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 124KB
                                                                                                                                                                                                                                                                                                                              • SHA256 1da41ea1b7e145c6e4f7e20b9543cc4520daf3430e0150613bed18389fe153e4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4283c30796a7c30aab03183c39b65074f05717b12465bd5b1d2839477e04f956
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 124KB
                                                                                                                                                                                                                                                                                                                              • SHA256 719a488a18038315c56c4ed171bd3d188fa9c6deb5021f8c6f159b2c90d49bc2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                                                                                                                              • SHA256 f6902d39cf16eef2a116b82abfd637d1991e138be8852cbc774d75fdfa7679b5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                                                                                                                              • SHA256 39c551279b6ebcff5008901504c197d9a336962d3e21c610df0a84951878a7ec
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 60KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e5f2c5b942ba89f06d2058f245a2a79962f4e8c3e26d7f722cc5dc3da1b3af7f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 134KB
                                                                                                                                                                                                                                                                                                                              • SHA256 50ba4341af8333cb3cf3f08f70b50a9f09b52d6c4ec5d9098254e0b04cf86ae3
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              settings.dat
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                              • Size 280B
                                                                                                                                                                                                                                                                                                                              • SHA256 5f46172781024fe58b7a7d87a406b81679d17de445e9e90110d33f5747ecc226
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              settings.dat
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                              • Size 280B
                                                                                                                                                                                                                                                                                                                              • SHA256 ff19e848916f9346514f95113e3d80cd569935b36d785719b19d90f9f740fbd6
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              settings.dat
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                              • Size 280B
                                                                                                                                                                                                                                                                                                                              • SHA256 25729842f807b47a32cd69d526dd245fde2e5c28d7e6caf0c8b55bde78bc4d76
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              settings.dat
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                              • Size 280B
                                                                                                                                                                                                                                                                                                                              • SHA256 6597b74ac64dfa191780a23c65bb4c3a51f9405e33826d4a7f29bb5d206f2495
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              settings.dat
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                              • Size 280B
                                                                                                                                                                                                                                                                                                                              • SHA256 86d083c636316d10b7edb7c470e95fffa6a1921f9e18c3f2427e305015fe8747
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              2f1e0a99-fc2d-4501-9208-b1d4607340bd.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f1e0a99-fc2d-4501-9208-b1d4607340bd.tmp
                                                                                                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                                                                                                              • SHA256 050431a80069be31b083cf9193d3594c0ac5c106ebfb951433519afbc1026b0e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              3f2025ff-e1e3-451a-a3ec-6f8b3e80a83f.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3f2025ff-e1e3-451a-a3ec-6f8b3e80a83f.tmp
                                                                                                                                                                                                                                                                                                                              • Size 414B
                                                                                                                                                                                                                                                                                                                              • SHA256 c77384dd6723bf464dc851c392b768aaff06311b424571cfd738b304baa2336b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              9de03824-4f4d-4b21-91af-f84ae8fcbd63.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9de03824-4f4d-4b21-91af-f84ae8fcbd63.tmp
                                                                                                                                                                                                                                                                                                                              • Size 1B
                                                                                                                                                                                                                                                                                                                              • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 de4db55bfbcd4a46ee4c17acdc71e0c4567b009a02c049a87d4b70fcf355b850
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index~RFe5a3fc9.TMP
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a3fc9.TMP
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 9c16c758555fa482c26d3a053ddc2c12fc23661eb134b03f84a0ec91a8385404
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              SiteList-Enterprise.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                                                                                                                                              • Size 2B
                                                                                                                                                                                                                                                                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Edge Profile.ico
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                                                                                                                                              • Size 70KB
                                                                                                                                                                                                                                                                                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              HubApps
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                                                                                                                                                                                                                              • Size 106KB
                                                                                                                                                                                                                                                                                                                              • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 2f6fb6907e4dd34f45695b440eab6c388dd77d16b63fa67b3e512a6b58f0bc9c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 254e43994a79a3b6f7368f5fe351b0a091c2fe2f1054bde502bfafae335d4bea
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Sdch Dictionaries
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                                                                              • Size 40B
                                                                                                                                                                                                                                                                                                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                                                                                                              • SHA256 58a6c35684fa6f859e36b4a36df828b2588a45f84979eaf2988491a493eab385
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                                                                                                              • SHA256 bc884696dd2be47a9a87583252b24863a53b76296b6d625bb08d0c06baa69b58
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Secure Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                              • Size 32KB
                                                                                                                                                                                                                                                                                                                              • SHA256 85940c3f3fcc09aa978e7663f0bce5cb4a3a686d954f37c83777ad1f8b4caf1b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              sync_diagnostic.log
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                                                                                                                              • SHA256 98d0e85dd9321f6385d8a211bcda85e801aeb45db45685e51eaa0636bdca36cf
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              25e5ce3b-1bd3-4261-94ad-fe9609fb3575.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\25e5ce3b-1bd3-4261-94ad-fe9609fb3575.tmp
                                                                                                                                                                                                                                                                                                                              • Size 22KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 48KB
                                                                                                                                                                                                                                                                                                                              • SHA256 85fc9d2c5b8664792154c452ea285105ac7a3066385f8e17c95e347c428d6971
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 63KB
                                                                                                                                                                                                                                                                                                                              • SHA256 50b1575affed6cffea36c7004d741b48c4534bd260e072c1c057ea92bef571b9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 39KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4c8f10bf2b40b1a5d2393a49a44a62a135fe00a58e742275bef3528b0e696a9c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 40KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ac68a0d4081b63c3557fa7ae0bd3992384500291679688bbf32c805221b1c4be
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 36KB
                                                                                                                                                                                                                                                                                                                              • SHA256 747b4b1642966f72bf23564c6f51ab2f522955c8f673ceb756990133cdf36a93
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                              • Size 36KB
                                                                                                                                                                                                                                                                                                                              • SHA256 7f93406f095287e71fd77744086d071286dca819e3556ebd02f456831cca921e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              data_1
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
                                                                                                                                                                                                                                                                                                                              • Size 264KB
                                                                                                                                                                                                                                                                                                                              • SHA256 232df291ac8b9da8fca4dcb8490f84a1a4b6ebd97a3a7bdb2c79365c47cd45ed
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              0d31417d-7eab-4cdb-919f-350e2188124b.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\0d31417d-7eab-4cdb-919f-350e2188124b.tmp
                                                                                                                                                                                                                                                                                                                              • Size 492B
                                                                                                                                                                                                                                                                                                                              • SHA256 9107e613905835c00077a499d2faa20bb70b974e6309d1f2f33ae52933318f07
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                              • Size 732B
                                                                                                                                                                                                                                                                                                                              • SHA256 a5548ca519cf47ecb420c8f1299a8a50517fa463459a704ef2ff17c4db35117a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 21075672ed04fcc0ad86c96036a015a0479bc539f9eb22ed2ee07d5f51ed51d5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 2b7c607fd6a639934c6f7311f36aa760dd4a600f84b9f8e2d066832856488091
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 7ae3abeff1a7ac2b396b3e38dc9d2900c37a4fa3623cd6a74cdc34b502978149
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                              • Size 852B
                                                                                                                                                                                                                                                                                                                              • SHA256 142a7cc7a4933a976aae32a9d04e1758464486092207243f09edbbad51f1d934
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 757c40068c8b44526fedddbae76f4ef49d46e6f99e9c5b6ac7daee04f31c52bc
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                              • Size 252B
                                                                                                                                                                                                                                                                                                                              • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                              • Size 972B
                                                                                                                                                                                                                                                                                                                              • SHA256 590065152acec5cf42dffc28eb04749514feaa899eb2ae04edce7d38a148fbda
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                              • Size 372B
                                                                                                                                                                                                                                                                                                                              • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                              • Size 612B
                                                                                                                                                                                                                                                                                                                              • SHA256 98d9b184e4c7220b5aaf7ae412b0c1b3f32e3dc4933afcf852538b8082017b9e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                              • Size 132B
                                                                                                                                                                                                                                                                                                                              • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              28bad50f-7de7-4564-9b3a-21c8b894b00a.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\28bad50f-7de7-4564-9b3a-21c8b894b00a.tmp
                                                                                                                                                                                                                                                                                                                              • Size 13B
                                                                                                                                                                                                                                                                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              suggestions[1].en-US
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\9C2FB5WU\suggestions[1].en-US
                                                                                                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                                                                                                              • SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              known_providers_download_v1[1].xml
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RAC8PJLK\known_providers_download_v1[1].xml
                                                                                                                                                                                                                                                                                                                              • Size 88KB
                                                                                                                                                                                                                                                                                                                              • SHA256 1e2e25bf730ff20c89d57aa38f7f34be7690820e8279b20127d0014dd27b743f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              0001.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\$inst\0001.tmp
                                                                                                                                                                                                                                                                                                                              • Size 8.0MB
                                                                                                                                                                                                                                                                                                                              • SHA256 803f930cdd94198bdd2e9a51aa962cc864748067373f11b2e9215404bd662cee
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              0002.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\$inst\0002.tmp
                                                                                                                                                                                                                                                                                                                              • Size 8.0MB
                                                                                                                                                                                                                                                                                                                              • SHA256 e1c89d9348aea185b0b0e80263c9e0bf14aa462294a5d13009363140a88df3ff
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              0003.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\$inst\0003.tmp
                                                                                                                                                                                                                                                                                                                              • Size 8.0MB
                                                                                                                                                                                                                                                                                                                              • SHA256 5eec15c6ed08995e4aaffa9beeeaf3d1d3a3d19f7f4890a63ddc5845930016cc
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              0004.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\$inst\0004.tmp
                                                                                                                                                                                                                                                                                                                              • Size 8.0MB
                                                                                                                                                                                                                                                                                                                              • SHA256 fee4d861c7302f378e7ce58f4e2ead1f2143168b7ca50205952e032c451d68f2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              0005.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\$inst\0005.tmp
                                                                                                                                                                                                                                                                                                                              • Size 8.0MB
                                                                                                                                                                                                                                                                                                                              • SHA256 026893ba15b76f01e12f3ef540686db8f52761dcaf0f91dcdc732c10e8f6da0e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              0006.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\$inst\0006.tmp
                                                                                                                                                                                                                                                                                                                              • Size 1.8MB
                                                                                                                                                                                                                                                                                                                              • SHA256 7fb63fca12ef039ad446482e3ce38abe79bdf8fc6987763fe337e63a1e29b30b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              +JXF12822607764015384137.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\+JXF12822607764015384137.tmp
                                                                                                                                                                                                                                                                                                                              • Size 156KB
                                                                                                                                                                                                                                                                                                                              • SHA256 7149f8f1d8b0386ab74427c78d660e211c572ffd901897f86475319d28248083
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              +JXF16121803449412756850.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\+JXF16121803449412756850.tmp
                                                                                                                                                                                                                                                                                                                              • Size 141KB
                                                                                                                                                                                                                                                                                                                              • SHA256 b2efabca5ea4bc56eea829713706b5cd0788b82aca153bd4adde9b1573933b4f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              +JXF588730718059490896.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\+JXF588730718059490896.tmp
                                                                                                                                                                                                                                                                                                                              • Size 477KB
                                                                                                                                                                                                                                                                                                                              • SHA256 a4ece920f221b78d43b550d615c5934db162b64a331ffa663a85199e74ef2e6b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              +JXF9013204204622795295.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\+JXF9013204204622795295.tmp
                                                                                                                                                                                                                                                                                                                              • Size 132KB
                                                                                                                                                                                                                                                                                                                              • SHA256 9287925cae90ac480804094ff0876832065e2db116470da1f524d79ed9c18b70
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              +JXF9132149614178655992.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\+JXF9132149614178655992.tmp
                                                                                                                                                                                                                                                                                                                              • Size 424KB
                                                                                                                                                                                                                                                                                                                              • SHA256 83ff53f599acefc11f5cf63fd0516d4db72aacf7f0125a5f79c9ff222cbf9dd7
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              +JXF9907656122180645254.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\+JXF9907656122180645254.tmp
                                                                                                                                                                                                                                                                                                                              • Size 191KB
                                                                                                                                                                                                                                                                                                                              • SHA256 9384b96c3c71d777fe20da8ffec067a4a50802f1ef42a1f3543d2b8059a45add
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Opera GX Browser.lnk
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\Opera GX Browser.lnk
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 2b35e16f39fbbe61f0410e4e27c818368023de58af4868e30945ba89dd778d6e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              additional_file0.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\additional_file0.tmp
                                                                                                                                                                                                                                                                                                                              • Size 2.8MB
                                                                                                                                                                                                                                                                                                                              • SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                              • Size 242B
                                                                                                                                                                                                                                                                                                                              • SHA256 6823f5aa4a5aed12bf5387215bba36d68ff77b64f006593d69724b74902c6812
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                              • Size 227B
                                                                                                                                                                                                                                                                                                                              • SHA256 97331f17409895395d817dd6dab7119ff107665a9f866a3c2926bfa9ada6b1b7
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2ca9ca00-6be7-42e9-bfda-ce33411bb0ee Opera GX Installer Temp\opera_package_202606222351261\installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                              • Size 954B
                                                                                                                                                                                                                                                                                                                              • SHA256 4293b33c64449c659c394d5efadc436a76c1db7295805d252fd27b1c6ec306af
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              4710def6-d444-47e2-a1c9-44c2045e81ca.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\4710def6-d444-47e2-a1c9-44c2045e81ca.tmp
                                                                                                                                                                                                                                                                                                                              • Size 4.2MB
                                                                                                                                                                                                                                                                                                                              • SHA256 c8e9651b963f95c499f283799aa8ba4a2023970bad575445fbabb71d87195b3e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              6a9c6903-8626-4ecb-8c13-d154e35ea34e.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\6a9c6903-8626-4ecb-8c13-d154e35ea34e.tmp
                                                                                                                                                                                                                                                                                                                              • Size 472KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              installer.exe
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\7zS0142C26E\installer.exe
                                                                                                                                                                                                                                                                                                                              • Size 9.1MB
                                                                                                                                                                                                                                                                                                                              • SHA256 33566d50268068e1fab01b06431773c863627abcfa5e0614ecae1443ebfefa61
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ADVPACK.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ADVPACK.DLL
                                                                                                                                                                                                                                                                                                                              • Size 73KB
                                                                                                                                                                                                                                                                                                                              • SHA256 7d126ed85df9705ec4f38bd52a73b621cf64dd87a3e8f9429a569f3f82f74004
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGENTANM.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTANM.DLL
                                                                                                                                                                                                                                                                                                                              • Size 40KB
                                                                                                                                                                                                                                                                                                                              • SHA256 905cb1a15eccaa9b79926ee7cfe3629a6f1c6b24bdd6cea9ccb9ebc9eaa92ff7
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGENTCTL.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTCTL.DLL
                                                                                                                                                                                                                                                                                                                              • Size 160KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d19b6b7c57bcee7239526339e683f62d9c2f9690947d0a446001377f0b56103a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGENTDP2.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDP2.DLL
                                                                                                                                                                                                                                                                                                                              • Size 60KB
                                                                                                                                                                                                                                                                                                                              • SHA256 c33beaba130f8b740dddb9980fe9012f9322ac6e94f36a6aa6086851c51b98de
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGENTDPV.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDPV.DLL
                                                                                                                                                                                                                                                                                                                              • Size 64KB
                                                                                                                                                                                                                                                                                                                              • SHA256 394a17150b8774e507b8f368c2c248c10fce50fc43184b744e771f0e79ecafed
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGENTMPX.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTMPX.DLL
                                                                                                                                                                                                                                                                                                                              • Size 60KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6550582e41fc53b8a7ccdf9ac603216937c6ff2a28e9538610adb7e67d782ab5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGENTPSH.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTPSH.DLL
                                                                                                                                                                                                                                                                                                                              • Size 36KB
                                                                                                                                                                                                                                                                                                                              • SHA256 8414dfe399813b7426c235ba1e625bd2b5635c8140da0d0cfc947f6565fe415f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGENTSR.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSR.DLL
                                                                                                                                                                                                                                                                                                                              • Size 60KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e78e74c24d468284639faf9dcfdba855f3e4f00b2f26db6b2c491fa51da8916d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGENTSVR.EXE
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSVR.EXE
                                                                                                                                                                                                                                                                                                                              • Size 268KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e8ce546196b6878a8c34da863a6c8a7e34af18fb9b509d4d36763734efa2d175
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGT0409.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.DLL
                                                                                                                                                                                                                                                                                                                              • Size 28KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6b0b57e5b27d901f4f106b236c58d0b2551b384531a8f3dad6c06ed4261424b1
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGT0409.HLP
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.HLP
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e4ccf06706e68621bb69add3dd88fed82d30ad8778a55907d33f6d093ac16801
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGT20.INF
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT20.INF
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 49e6b848f5a708d161f795157333d7e1c7103455a2f47f50895683ef6a1abe4d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGTCTL15.TLB
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTCTL15.TLB
                                                                                                                                                                                                                                                                                                                              • Size 28KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3f8adc1e332dd5c252bbcf92bf6079b38a74d360d94979169206db34e6a24cd2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              AGTINST.INF
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTINST.INF
                                                                                                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                                                                                                              • SHA256 bd1295d19d010d4866c9d6d87877913eee69e279d4d089e5756ba285f3424e00
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              MSLWVTTS.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\MSLWVTTS.DLL
                                                                                                                                                                                                                                                                                                                              • Size 52KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ea4ca740cd60d2c88280ff8115bf354876478ef27e9e676d8b66601b4e900ba0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Msvcirt.dll
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcirt.dll
                                                                                                                                                                                                                                                                                                                              • Size 76KB
                                                                                                                                                                                                                                                                                                                              • SHA256 647f7534aaaedffa93534e4cb9b24bfcf91524828ff0364d88973be58139e255
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Msvcp50.dll
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcp50.dll
                                                                                                                                                                                                                                                                                                                              • Size 552KB
                                                                                                                                                                                                                                                                                                                              • SHA256 91cd76f9fa3b25008decb12c005c194bdf66c8d6526a954de7051bec9aae462a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              W95INF16.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF16.DLL
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 337d2fb5252fc532b7bf67476b5979d158ca2ac589e49c6810e2e1afebe296af
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              W95INF32.DLL
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF32.DLL
                                                                                                                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e5e9f7c8dbd47134815e155ed1c7b261805eda6fddea6fa4ea78e0e4fb4f7fb5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              andmoipa.ttf
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\andmoipa.ttf
                                                                                                                                                                                                                                                                                                                              • Size 29KB
                                                                                                                                                                                                                                                                                                                              • SHA256 38ae07eeb7909bda291d302848b8fe5f11849cf0d597f0e5b300bfed465aed4e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              tv_enua.dll
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.dll
                                                                                                                                                                                                                                                                                                                              • Size 1.2MB
                                                                                                                                                                                                                                                                                                                              • SHA256 e0beb19c3536561f603474e3d5e3c3dff341745d317bc4d1463e2abf182bb18d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              tv_enua.hlp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.hlp
                                                                                                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                                                                                                              • SHA256 382d745e10944b507a8d9c69ae2e4affd4acf045729a19ac143fa8d9613ccb42
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              tv_enua.inf
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.inf
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 85189df1c141ef5d86c93b1142e65bf03db126d12d24e18b93dd4cc9f3e438ae
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              tvenuax.dll
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tvenuax.dll
                                                                                                                                                                                                                                                                                                                              • Size 40KB
                                                                                                                                                                                                                                                                                                                              • SHA256 c9106198ecbd3a9cab8c2feff07f16d6bb1adfa19550148fc96076f0f28a37b0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              200.ico
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
                                                                                                                                                                                                                                                                                                                              • Size 116KB
                                                                                                                                                                                                                                                                                                                              • SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              BrowserInstaller.exe
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
                                                                                                                                                                                                                                                                                                                              • Size 3.7MB
                                                                                                                                                                                                                                                                                                                              • SHA256 e20f18d8c5d3621a81d35fe43d759ddb148e35d1856a94fbe95dfbec93127a10
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG1.BMP
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.BMP
                                                                                                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                                                                                                              • SHA256 1d7a67b1c0d620506ac76da1984449dfb9c35ffa080dc51e439ed45eecaa7ee0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG1.PNG
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG
                                                                                                                                                                                                                                                                                                                              • Size 45KB
                                                                                                                                                                                                                                                                                                                              • SHA256 a42ab4d62c5a5286202df15f9ad32b22396d5d12c7a4db8c5a2c98f90160ade1
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG10.PNG
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG10.PNG
                                                                                                                                                                                                                                                                                                                              • Size 206B
                                                                                                                                                                                                                                                                                                                              • SHA256 348e3f3544cca4c9ca2af323fa8b3453a70ea421c82b331681dc1d4ef74921f3
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG13.PNG
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG13.PNG
                                                                                                                                                                                                                                                                                                                              • Size 41KB
                                                                                                                                                                                                                                                                                                                              • SHA256 1708790d5496b9cc325cc0249cfa272aac3c3738188fc41eef83e8592de247ff
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG14.PNG
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG14.PNG
                                                                                                                                                                                                                                                                                                                              • Size 43KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6528bb11becf79c17c77a9c6624b82074b9dd6d3e932852c8fe1da22a57854aa
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG15.PNG
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG15.PNG
                                                                                                                                                                                                                                                                                                                              • Size 644B
                                                                                                                                                                                                                                                                                                                              • SHA256 207bd7ad2eb7f48a2a1be1253363fa120ae79e25eacbd37d6b9be52d2128bfdd
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG17.PNG
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG17.PNG
                                                                                                                                                                                                                                                                                                                              • Size 40KB
                                                                                                                                                                                                                                                                                                                              • SHA256 06fad383e3506eb1be52877bee839b833de157a2601af1c443ef1244a92f5d8f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG2.BMP
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.BMP
                                                                                                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                                                                                                              • SHA256 9c893fe1ab940ee4c2424aa9dd9972e7ad3198da670006263ecbbb5106d881e3
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG3.BMP
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.BMP
                                                                                                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4c85cdddd497ad81fedb090bc0f8d69b54106c226063fdc1795ada7d8dc74e26
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG3.PNG
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG
                                                                                                                                                                                                                                                                                                                              • Size 475B
                                                                                                                                                                                                                                                                                                                              • SHA256 d339d7a5fcaff72292150f3c7db87a73caa396e23224b570e053c8bb96a3a897
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG4.BMP
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG4.BMP
                                                                                                                                                                                                                                                                                                                              • Size 451KB
                                                                                                                                                                                                                                                                                                                              • SHA256 64da5bd044908b2c3a725c5a55edec1644be498f41ea05d42a6ae8cd797f1d80
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG4.PNG
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG4.PNG
                                                                                                                                                                                                                                                                                                                              • Size 368B
                                                                                                                                                                                                                                                                                                                              • SHA256 3207283d0abc0dd36c0991b40a738247394bbc92e5696eb790a5c888a9f28106
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRIMG9.PNG
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG9.PNG
                                                                                                                                                                                                                                                                                                                              • Size 438B
                                                                                                                                                                                                                                                                                                                              • SHA256 d16a8eaf8f979e45bacbbd8ef14afe482d74e926dff2e87e569342874ba34145
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              IRZip.lmd
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
                                                                                                                                                                                                                                                                                                                              • Size 400KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3a6794c90d69383bd76098992cb512ae343cb2e1a3680dd4794e49895472b429
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Wow64.lmd
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
                                                                                                                                                                                                                                                                                                                              • Size 252KB
                                                                                                                                                                                                                                                                                                                              • SHA256 27b48727237cd0f8a1205e01e5c93cbe6c7a2f3938faf8d8daa5191094c347a5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              irsetup.exe
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                                                                                                                                                                                                                                                                              • Size 1.8MB
                                                                                                                                                                                                                                                                                                                              • SHA256 96070b2d82b6bffd54719f9753909be5f5151edbd5b37b26f50dea2e995ea430
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              irsetup.exe
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                                                                                                                                                                                                                                                                              • Size 1.7MB
                                                                                                                                                                                                                                                                                                                              • SHA256 ea04ee2883ca5dcb461ea894a4e2def7d0c89f11d9f06f3bae020f6a25e7b75d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              a62e9250-6e68-44c6-8349-32e01b7f69ad.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\a62e9250-6e68-44c6-8349-32e01b7f69ad.tmp
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 1063c0cf8fa368edbeb9d05655366387b9b4c5c4e30b6d124ff31ea4517a6b3f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              opera-installer-bro.exe
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                                                                                                                                                                                                                                                                                                                              • Size 3.9MB
                                                                                                                                                                                                                                                                                                                              • SHA256 93bb3b138835993206d9ece31979752e4128f930e1909ca45a4a6ce75367e72a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              messages.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2732_573233290\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                                                                                                                                              • Size 450B
                                                                                                                                                                                                                                                                                                                              • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              content_new.js
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6432_1929287941\CRX_INSTALL\content_new.js
                                                                                                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              TLauncher.exe
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                                                                                                                                                                                                                                                                                              • Size 9.2MB
                                                                                                                                                                                                                                                                                                                              • SHA256 8cdc16a8f34f99dc85273838350ae9a9a840de8c6dda3c045c5514520842dd78
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              net.properties
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\net.properties
                                                                                                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                                                                                                              • SHA256 594bc40230a0bd7c441fe069989d66e534a6bae2ee5910f9f4bf64e59b583256
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              README.txt
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\security\policy\README.txt
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6da0747334b0fea7592fd92614b2bbc8b126535e129b1fee483774d914e98eb5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              default_US_export.policy.tlauncherdownload
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\security\policy\limited\default_US_export.policy.tlauncherdownload
                                                                                                                                                                                                                                                                                                                              • Size 146B
                                                                                                                                                                                                                                                                                                                              • SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              default_local.policy
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\security\policy\limited\default_local.policy
                                                                                                                                                                                                                                                                                                                              • Size 647B
                                                                                                                                                                                                                                                                                                                              • SHA256 2b2627548e61316150d47ffc3e6cad465ca05b3cccd4785eb7d21aa7baa0f441
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              exempt_local.policy
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\security\policy\limited\exempt_local.policy
                                                                                                                                                                                                                                                                                                                              • Size 566B
                                                                                                                                                                                                                                                                                                                              • SHA256 8c3d7648abcd95a272ce12db870082937f4d7f6878d730d83cb7fbb31eb8b2c9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              default_local.policy
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\security\policy\unlimited\default_local.policy
                                                                                                                                                                                                                                                                                                                              • Size 193B
                                                                                                                                                                                                                                                                                                                              • SHA256 8d8a318e6d90dfd7e26612d2b6385aa704f686ca6134c551f8928418d92b851a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              sound.properties
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\sound.properties
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ADDITIONAL_LICENSE_INFO
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\ADDITIONAL_LICENSE_INFO
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 a69bce275ba7a3570af6579cb0f55682cd75fedfcd49e0e8e9022270c447c916
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              LICENSE
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\LICENSE
                                                                                                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4b9abebc4338048a7c2dc184e9f800deb349366bdf28eb23c2677a77b4c87726
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              aes.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\aes.md
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 45c6d4da48325edfbff3dcf71c704e504c057904435ed23c6d57046d551eb69d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              c-libutl.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\c-libutl.md
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 bef40679922d6fdfb7e4ddb223ad6722300f6054ba737bbf6188d60fcec517f9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              siphash.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\siphash.md
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 5a792b5a74ad2a5f3d6a7ad8b7a841116e58a772c18bc6e392320a365b222c76
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              wepoll.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\wepoll.md
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3ac2992770080453b98c42afa807ba4b2c1738ef756b92a55c645f55e7df48f0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              zlib.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\zlib.md
                                                                                                                                                                                                                                                                                                                              • Size 1010B
                                                                                                                                                                                                                                                                                                                              • SHA256 809b62ba648e02302f7d9ea6b6886c10d5253ac86ad528038a50c73eada5fce2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              LICENSE.tlauncherdownload
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.compiler\LICENSE.tlauncherdownload
                                                                                                                                                                                                                                                                                                                              • Size 32B
                                                                                                                                                                                                                                                                                                                              • SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ADDITIONAL_LICENSE_INFO.tlauncherdownload
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\ADDITIONAL_LICENSE_INFO.tlauncherdownload
                                                                                                                                                                                                                                                                                                                              • Size 48B
                                                                                                                                                                                                                                                                                                                              • SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ASSEMBLY_EXCEPTION.tlauncherdownload
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\ASSEMBLY_EXCEPTION.tlauncherdownload
                                                                                                                                                                                                                                                                                                                              • Size 43B
                                                                                                                                                                                                                                                                                                                              • SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              colorimaging.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\colorimaging.md
                                                                                                                                                                                                                                                                                                                              • Size 167B
                                                                                                                                                                                                                                                                                                                              • SHA256 04d61e3e8e71dd452ebe52008af5378d9f6640d14578aeb515dc5375973b0189
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              harfbuzz.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\harfbuzz.md
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 b3f327a8b36d56beb152b3fd1bb5a7f245362cbea123ebbc68f8907f741b552a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              jpeg.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\jpeg.md
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 c1dfb9719a71ad9f861f8728550542d681e25c8ef40e6393606e6e2a0c1d653a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              mesa3d.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\mesa3d.md
                                                                                                                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                                                                                                                              • SHA256 63f4e6f75caebbccb95d903fb43e46ac7111b3624d0a34f146b276d7d9e7b152
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              santuario.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.xml.crypto\santuario.md
                                                                                                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d08690d25f660f145c73365d260ed522cd0aace8a0e1396706551b7a1ae8c9a3
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              dom.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.xml\dom.md
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6686e8877667584a3a7c07344baadca1a03e29f677162d87c3c0811e990d1148
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              jcup.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.xml\jcup.md
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 8d5dcfdf50455a3c34c753a98f21e953248af200415a9084e3f102cb6c43b8bf
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              xalan.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.xml\xalan.md
                                                                                                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                                                                                                              • SHA256 02bd013fc3f438dbb8fa41fa57888177e015efa6431d37fce6e794c6f353a6a1
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              xerces.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.xml\xerces.md
                                                                                                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4a6bf6b367193ee68681cb2d9fed30ffc5d62dd2d477bd62e0271707d71b3244
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              pkcs11cryptotoken.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\jdk.crypto.cryptoki\pkcs11cryptotoken.md
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 1f36ff1342a581142c858f90064e20633d43529ac82adb85345bd902a14e18b2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              pkcs11wrapper.md
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\jdk.crypto.cryptoki\pkcs11wrapper.md
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 371974b1fca3744a3892c7ee1fcc593b8b4281fc218f4cafd2f709e9df5fd81d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              uninstall.xml
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 c960c0eaed0ecaf2b8f6fbfcb83a30a2afd580916915e1c4f262c9ff80bc0ba4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              uninstall.xml
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6e89d5d89f8681ec78bf73d7d9ba9dcbd4ca4e3b1a0354c359cf93efc7752667
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              uninstall.xml
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                                                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                                                                                                                              • SHA256 81fb67603da783f99272ce829a9b4299ba6c0fd823a254a905ba6c3b8c67630e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              uninstall.xml
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                                                                                                                                                                                                                                                              • Size 21KB
                                                                                                                                                                                                                                                                                                                              • SHA256 b7180ed824aa8daf4f20252a2f94ba30eb1217cfb0984094269301214237721e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              version_manifest.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_launchermeta.mojang.com\mc\game\version_manifest.json
                                                                                                                                                                                                                                                                                                                              • Size 199KB
                                                                                                                                                                                                                                                                                                                              • SHA256 00b4bd865582c21e0d1103cf534469bb0592dd4206ac31a705a1f079ea33daae
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              26.2.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_piston-meta.mojang.com\v1\packages\4c3cd3500ce8b9ea104c358a784634fedb2a610f\26.2.json
                                                                                                                                                                                                                                                                                                                              • Size 50KB
                                                                                                                                                                                                                                                                                                                              • SHA256 41e3d99780dd99716f2c28c2c125ca2aa85d650968cd9c1b6665c61a57305b6c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              manifest.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_piston-meta.mojang.com\v1\packages\b374544c680d965fb5535977d7cb04c6befe1930\manifest.json
                                                                                                                                                                                                                                                                                                                              • Size 149KB
                                                                                                                                                                                                                                                                                                                              • SHA256 fcac80eeabd7f68b10136286493f633d043e5804ff4fa1692e654edd129c5853
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              32.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_piston-meta.mojang.com\v1\packages\f8a4b0071155bcfad32d83a39d78b6da48b7a6e6\32.json
                                                                                                                                                                                                                                                                                                                              • Size 572KB
                                                                                                                                                                                                                                                                                                                              • SHA256 2117d1852baaa3b8b23e8bb45681219c8ec30f6d3ff68e4d52be2fd349f621b9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              inner_servers-1.2.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs\inner_servers-1.2.json
                                                                                                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6b411ff24a9c61c2ce2649de3ec798d07ee16e2880630048bfc05dd381bc43b4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              index_en.html
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs_v1\pages\index_en.html
                                                                                                                                                                                                                                                                                                                              • Size 50KB
                                                                                                                                                                                                                                                                                                                              • SHA256 80e73ac5767a5545502fcb7f3830d9d270f4cd9e4fc5ba66ce8abcf833a4a000
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              libraries-1.7.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\libraries\org\tlauncher\authlib\libraries-1.7.json
                                                                                                                                                                                                                                                                                                                              • Size 367KB
                                                                                                                                                                                                                                                                                                                              • SHA256 cdee74996a6eb73a205799c6e439277c419f6dad1dce2e939f506822eb6a74d5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              additional_assets-1.1.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\additional_assets-1.1.json
                                                                                                                                                                                                                                                                                                                              • Size 190KB
                                                                                                                                                                                                                                                                                                                              • SHA256 12ea0578ab812f6e6730ea5b23e7f8bfcbaec59e801b8699abc1e773a3b7476b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              version_manifest.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\skin\versions\version_manifest.json
                                                                                                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ebace30304f4a7cdc61a56c996ae17566a50616d3d1f4509c6251658a3dc641b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              version_manifest.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\version_manifest.json
                                                                                                                                                                                                                                                                                                                              • Size 48KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e0df0208058a83b15f3624972c8b91fc7d3f8a52d7ddc4f846282b65bb507569
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              additional_hot_servers-1.0.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\additional_hot_servers-1.0.json
                                                                                                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                                                                                                              • SHA256 954447df36751cc674632c9cb04299b523dd142350e48220ba3bd6cd7c277773
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              hot_servers-1.0.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\servers\hot_servers-1.0.json
                                                                                                                                                                                                                                                                                                                              • Size 66KB
                                                                                                                                                                                                                                                                                                                              • SHA256 65eb8c7a27e91cb5b72d030e14984d775b499b6cf1ec69a58b9adb797c46c2fe
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              java_configuration.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_rescl.tl.vg\b\jvm\java_configuration.json
                                                                                                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                                                                                                              • SHA256 b490908c9bda7f4ed5220145dee8dd1ee9ad92a210080adec3c183b0f0a50a8b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              dependencies.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9369\dependencies.json
                                                                                                                                                                                                                                                                                                                              • Size 25KB
                                                                                                                                                                                                                                                                                                                              • SHA256 f25fb93425e2fdd712de5d06c36bc0da4ec5c07a17c7cbd4fe2ecc9b68090b89
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              resources.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9369\resources.json
                                                                                                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                                                                                                              • SHA256 581d5e1f979f718cb57124103d2372f1b6f7e789dd45ccc77dc9378fff541258
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              appConfig.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\appConfig.json
                                                                                                                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                                                                                                                              • SHA256 18d1cc05c126707902ab7859455a406d98712f7f3d01e420a2decd8790fafa4e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              javaConfig21.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\javaConfig21.json
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4e677c3608065a9a12f97bededc27fd440711f94288012207645df37f516d699
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              starter-core-1.268-v3.exe
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\update\lch\starter-core-1.268-v3.exe
                                                                                                                                                                                                                                                                                                                              • Size 9.2MB
                                                                                                                                                                                                                                                                                                                              • SHA256 a92a1dea42081672b52a60748064d443f4366f98e04a189fd3b56b24816f26d6
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              COPYRIGHT
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\COPYRIGHT
                                                                                                                                                                                                                                                                                                                              • Size 35B
                                                                                                                                                                                                                                                                                                                              • SHA256 7afb3a2dc57cb16223dddc970e0b464311e5311484c793abf9327a19ef629018
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              LICENSE
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\LICENSE
                                                                                                                                                                                                                                                                                                                              • Size 33B
                                                                                                                                                                                                                                                                                                                              • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ADDITIONAL_LICENSE_INFO
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ADDITIONAL_LICENSE_INFO
                                                                                                                                                                                                                                                                                                                              • Size 51B
                                                                                                                                                                                                                                                                                                                              • SHA256 0a256a7133bd2146482018ba6204a4ecc75836c139c8792da53536a9b67071d4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ASSEMBLY_EXCEPTION
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ASSEMBLY_EXCEPTION
                                                                                                                                                                                                                                                                                                                              • Size 46B
                                                                                                                                                                                                                                                                                                                              • SHA256 a4b7ad48df36316ddd7d47fcecc1d7a2c59cbfe22728930220ef63517fd58cb0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              LICENSE
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\LICENSE
                                                                                                                                                                                                                                                                                                                              • Size 35B
                                                                                                                                                                                                                                                                                                                              • SHA256 01a4ebd2a3b2671d913582f1241a176a13e9be98f4e3d5f2f04813e122b88105
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              tlauncher-2.0.properties
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\.tlauncher\tlauncher-2.0.properties
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d9438b00e8a3d919325ffe88ace526329c6d4f161ca4f6fb599254dd3f0dc95a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              default.exc
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                                                                                                                                                                                                                                                                              • Size 2B
                                                                                                                                                                                                                                                                                                                              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              1423a649-67aa-4914-9c89-ca78a5fc7f16.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\1423a649-67aa-4914-9c89-ca78a5fc7f16.tmp
                                                                                                                                                                                                                                                                                                                              • Size 151B
                                                                                                                                                                                                                                                                                                                              • SHA256 408a69cff7927a5ab576c3d1a2d5b2f47b7664458704e2b874d17f058881a22a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              settings.dat
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                                                                                                                                                                                                                              • Size 40B
                                                                                                                                                                                                                                                                                                                              • SHA256 a3c10f8b69720a46f254092258ca1ef8fa7956de8b190c0c68fc28ca79b97b37
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              05475576-910c-406b-8aa7-dd085eb43018.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\05475576-910c-406b-8aa7-dd085eb43018.tmp
                                                                                                                                                                                                                                                                                                                              • Size 171B
                                                                                                                                                                                                                                                                                                                              • SHA256 b7389779522be0b86a0243efcc74712a9c9252cc000da8a7e68919c791bc4651
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              204e0b9d-4517-48ce-9f02-953af5ba0ae1.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\204e0b9d-4517-48ce-9f02-953af5ba0ae1.tmp
                                                                                                                                                                                                                                                                                                                              • Size 173B
                                                                                                                                                                                                                                                                                                                              • SHA256 99d2e3806c01c78de5da08a60b84ce90079050d4a2aa1486fa8a082a94ad25a1
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              38f7a5d1-fe7e-4796-9c34-c43b4fbd0717.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\38f7a5d1-fe7e-4796-9c34-c43b4fbd0717.tmp
                                                                                                                                                                                                                                                                                                                              • Size 162KB
                                                                                                                                                                                                                                                                                                                              • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              63612af6-3fe0-4ac4-9d53-2361f3101030.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\63612af6-3fe0-4ac4-9d53-2361f3101030.tmp
                                                                                                                                                                                                                                                                                                                              • Size 20KB
                                                                                                                                                                                                                                                                                                                              • SHA256 f8d967c71ddac683433c05c53ac0363bf797930c18d24cccee3b21e3b798ef94
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              7bffc900-968d-4780-a9c9-f9c43e8bf65e.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\7bffc900-968d-4780-a9c9-f9c43e8bf65e.tmp
                                                                                                                                                                                                                                                                                                                              • Size 84KB
                                                                                                                                                                                                                                                                                                                              • SHA256 9e9e1c78323329eaede8618bf00a3ccd72461c4ab787ef71f27aaa183e33c62e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              9800305b-7d35-4400-911d-8bbc0ef1c423.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\9800305b-7d35-4400-911d-8bbc0ef1c423.tmp
                                                                                                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3c61cd1cfd0fd97c803c00c7cb721c0f7f28aa7760d0005133b83e7f50b43a96
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Bookmarks
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
                                                                                                                                                                                                                                                                                                                              • Size 21KB
                                                                                                                                                                                                                                                                                                                              • SHA256 31682a7da31faaaa54d0203846c43e1e37bce46aa9d0c49c1f0d6f73d068ce28
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                                                                                                              • SHA256 1905b7d7c28da30584cd755262e4cbca29c721fb22528d0f42312010ac63e0c8
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                              • SHA256 2c25e70412376b0de3b8d183a03d30630ca43a30ee0fde3b5ab972a6a5cdf443
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Secure Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                              • Size 85KB
                                                                                                                                                                                                                                                                                                                              • SHA256 69a5f857e33a273ed1378c47aebb40ef0e864c0c61d74a92b4a104b11fde5957
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Secure Preferences
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                              • Size 194KB
                                                                                                                                                                                                                                                                                                                              • SHA256 84a18dda97b914061bccaff5eb47fb94b760300ea10d1a952c0b6326a6a49613
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              08695c5b-6231-4b82-a63b-afa03f4c89c1.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\08695c5b-6231-4b82-a63b-afa03f4c89c1.tmp
                                                                                                                                                                                                                                                                                                                              • Size 72B
                                                                                                                                                                                                                                                                                                                              • SHA256 3e91c67cbd0a9ce55ae4375491e0b58257adaf93c7d660cda8e03da9ae81e865
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                              • Size 48B
                                                                                                                                                                                                                                                                                                                              • SHA256 80a17c1f0a34735d9f8dbc9791d0c4e204d3bbc283e19f3aabb243251eda394c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              51cd4dac-5f7c-4586-bf60-f2d71dbacc38.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\51cd4dac-5f7c-4586-bf60-f2d71dbacc38.tmp
                                                                                                                                                                                                                                                                                                                              • Size 381B
                                                                                                                                                                                                                                                                                                                              • SHA256 9cc763d8f6cddaf3a013a65090ae109af25ecb33d0858ed0037bbe309bbb9027
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 605B
                                                                                                                                                                                                                                                                                                                              • SHA256 03a2614386d3d6a97f7fdc2b492eeaa7125599933ef05bed3cdca852ce5f799d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 909B
                                                                                                                                                                                                                                                                                                                              • SHA256 b2be0f75e4f36e47e86601663e87581131c218ab6d73c681a963714d4a5cdcfb
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 8316846c99a81e089c88adca466edd7a190e797e6dbaa16dab8056f3fc7fb378
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 057354279adfdc44fb8ba581d7e40c42438800e79d4ae61f22273de5b3408f8b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 973bb72fb477dac9ee88be46a2042f10f1be14f45ddf6de2f6292160207bad83
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                                                                                                              • SHA256 0ce978a9c0cfd8ee5d9105242b6cecc8b8bf6bbadf1a74efb0bc843794ae64ba
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 493B
                                                                                                                                                                                                                                                                                                                              • SHA256 218bf8d3f314461ba6964ae803b4b00f8c75f21872ad02fbc4024044808f0b4b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 733B
                                                                                                                                                                                                                                                                                                                              • SHA256 8c6bf4dfae14707f709f910d8aa50cacb81693765202cd6aac0f0de0f00c60d8
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 5f2ff922e2054093e45ae454bb81f8f260a899a399fd93cddd9585499ec5af6f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ea1b7a4af92189d5185c52aa863aa1591378ac14222d4be7ca9b21ae51906e9b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 02b0fce905ca4378c61ec89ab39e5bdf44b247fd2fc27cdd8d64016f272f502b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 2264b6dd54523ad2188dd3972d5364f02ea5cf49c2ec0db667aa7e6ab4c851f2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 778c6d359a031a02ad9dbeae5406f8ba26e5a8189d8622407fe1b78f75752d74
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d660f1174de12d74f6b7db36556fd655ab670401aee40495ab8ddd461deed463
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6f9acf477f6657604c6775c01a18de4e46b1008e49a72e1eaec944681f18fc34
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ad023b67e53bf63ace9387e234933ff9f5d5f05701cbea317aa74fe42620c991
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 63260c4ec783cc48f70e3537ab642ce7aca4f4dc16da9080c97d6e5b60638d1e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d7824515e13f07652150cc3f6b5e18ee9144cfb32867770c79eea9fa7b458f7f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3c6f1f201762bda53be702eac5684a4707476fd84beda167db6a68a1bd7097b2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3c29c8c35886947ad0f50fc765a42e5fcaa14c45335f4bab0fe0fbc3d8ff3617
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 f6bc17e81f019984ddfd06875d2a5b50323bc0998f37c6035d2796d76520272e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                                                                                                              • SHA256 c32862e60aadd84f3b7ee3a30ebaa32513850aea8ee613a511ff16847666ab56
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ef767ad7594660b008f0124de8f785eebfb5a936640bc8b6d39347984150ade1
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 bb5218b8f6372108b7fdc62e039ad8da3953d092be372f0f2940e034e1d4ff40
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 17b9fb13122d7f5e014408d3c4d12ffed75f0fe35d89e7e7f11194b05a47e4e1
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 bd31290e65bf845791776910d7ada17d3f2e5a9a1c3827da887cfa77dc15cc14
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6ec21393616072b64832a725df53cc0b653da9bf0da361b075abc9c3a17c2f19
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 735127280a9de37a9f59f7468bf7cf06ea707d24754576eced4a782aec8c8748
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 480eee4c84f3aefa124c6183114e8ed0c3cd4022de3ef8c5bd01493c69d70121
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 baed636a2a2fff5d97d474bdd06a2cda2f644362080e7753c46d7de9612079b4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 981853dd84b439c905994b773cf588db1771dfb407fc5abc7193dd983c269317
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 b1ef7572e7ba7ce85aa1ec2bb09094743e32d48ddd3516362966ab0c1716b106
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 0d7f3a0ca7713764743d5892dddec1b456254fb4787726826442fe8060b98b29
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 f4e5ade8b5b8d5717ea48570c1521b5877ab7bf093e26e735aed21c96e6cb919
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 8fd3c617a69140c457489e5c802d7516ef443736cf05b66a808a9cc0377bc4bb
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d4aa53579c7a61a06e8497e6c65c25d66c13d3ff44950918305a0b75f516a600
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 0a57d4a2c21272a333c766692e24615479e8e4570ab8fe3e970227a45d9a25a9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e4d20061f395fd03c34c8925d7e0e1ccc581436b6b4b78a12ed6122c7ca84ec2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4543a55bc39153d6c6888f1e4e6e4539a692dd8c868ccc8bbaeca4deb09d7aff
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e8271c6de4e5b6d9e37660eb5f861bab8eddb353ce794ac0a3df87ce70d085af
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 68ba749a050c83b972a7aaee3e085017ca0b42195e007dc38d978b511c0e9dc7
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                                                                                                              • SHA256 80b833f482a0b62194d5313a20751daeda19a96b5fc79f2e0027195766af5f15
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d4285eef41cf9110c86e5161c0f4d7be9156b02a7250e3675fca15aff0af6076
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                                                                                                              • SHA256 03b2b262ad006a4381ce36b47ecfad764e50096dd513c75a646b4889eb869d0e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 216df3d007603b17a202cde56a0aa857d05e30034ab1cb91a142bd9c8390c558
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 fcbcf0b888ac8ce9fc7f514f80a95739bad6e6e29adac8f6d3730a7b8c10b06f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 affcd1d5731c8760669a4faab8d3bbb9ca4b6979febc3d5aa979747edaa04541
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 9748266069248590f8aa95ee291e88f4217e10a8e64b64724c7f60abc8dafe76
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                                                                                                              • SHA256 f3264ed7c44ffe1070cbffaf9e8bbb74a1018598bc5f872432ff61f27c2e0e52
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                              • SHA256 ec8bbe103ff052a27320cda9f56b668458e896f294d68a7669e22beb9371ccf4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                                                                                                              • SHA256 48e0a9c8acb35b12e11aa93d505bea80ff443985a294f147ab3c37f9927c83fd
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                                                                                                              • SHA256 1fe4bfac0e5b999039db24adf936d61d45f9b1df161d1b82a9de8ea0bf58f8f0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                                                                                                              • SHA256 38d82541ab6949f0604bb0296d71bbefb92e006f29d9185a99c69dc363e6ec6e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 85ce9f6c5ad4c35785ad216fac8fea3d194666e68a5b15793af7e4fb50c085b2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4fe5fd8606ca0db3bdb340a533b44c23f039f1243694db7c3264c52f61544f7c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d303c01b4423380c7f2e0be4060fb91bec40365e331bee1052b62e1bf7152c75
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f24c8c0b-b85a-448b-b630-d177eec32327.raw
                                                                                                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                                                                                                              • SHA256 2745110ce2008bbeae41556d60f37bed916949a53ed065fb3bc7556baacec17e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              b3175972-cac9-46a3-944d-685faa0874df.tmp
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\b3175972-cac9-46a3-944d-685faa0874df.tmp
                                                                                                                                                                                                                                                                                                                              • Size 327B
                                                                                                                                                                                                                                                                                                                              • SHA256 761f2c511a1390c487253d27dc3ce18905675af0fac3f98c496a6197190ced6d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 5864960920b78d45eb7c34abddad9d6fc2c3788dae78e658736b04d7b648a6b2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 446e00187b100bb80dad7b833f1061d72bf5fc0cec49bd99c623e035033b9b6f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 109fb3270a8f43e5b1c0293e2e105afeb5dd0fbf97cf3c9231f47a402ba6572e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 be1b364931e19539f699d00dbb5dff967c3c56bc9165149579fa103ff47cab29
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 388B
                                                                                                                                                                                                                                                                                                                              • SHA256 7808af7f138c5b0fcc94967a928a056109f21203695fcdba3cd504750f3743d2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 548B
                                                                                                                                                                                                                                                                                                                              • SHA256 02b20062a720b6eb691b1ad45867fdec09480e08d209ab7baf37f350c44de69b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 8f66522d491a6b9b6a8ca9176117cf63fccafea9512a09f9ac9a6b62744ecee9
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 6c5580d2196b758a9471d16ce9fb2d460f7fc1e09fe30ab7863b192a16ec5a3c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 60c7f67eb7706e9908f1031a7bdc06f818f9804878a623c451edadc852ee4808
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 c807d7e5a11accffbcd11d2086149e09d0c606f34f3893bd6d1fe4e9864e29bb
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 1bb0fbb0ab754ffecb9c8455f4285c07f0218b8424184e92f8ce909b24e7444e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.0.593903783
                                                                                                                                                                                                                                                                                                                              • Size 486B
                                                                                                                                                                                                                                                                                                                              • SHA256 f82a55fc8f175e7ef8a34c831ed5dfe0ca26be8ed449aed1b41d23dfba00187a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 d0151a5833d92658361e7ab1656d60e2e38d04517d4435c6457062d3c11bda4a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 8606d022bf0fddab10b17fce6dfdac781388d72f6048eef3cb273a41d8d8c54f
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 354B
                                                                                                                                                                                                                                                                                                                              • SHA256 1a48f7229b21275cfdf77e820270c75c66b6f14a1f0d043a7f0ddbc3446f36f5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 457B
                                                                                                                                                                                                                                                                                                                              • SHA256 64a988fa2a63f4a7aaa34036b052c98cb91fb24d2b1f193dedcc4abbbb98adb4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 558B
                                                                                                                                                                                                                                                                                                                              • SHA256 293cea716b6c6ac065854b6e0217b9b354681d5cec0e3cc1add44e380267ecef
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 736B
                                                                                                                                                                                                                                                                                                                              • SHA256 75aa2b0feffd757b95cdd955d3827dcd98e0dc62ce3821d907df3612c07b4db5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 834B
                                                                                                                                                                                                                                                                                                                              • SHA256 5f640e28179a7c83fd973d865a162bf635ab61db9f95d0b8a7bcfba435b6cba1
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 927B
                                                                                                                                                                                                                                                                                                                              • SHA256 6de8e74f90a0f90312c640788c743ea6709dbb35c3478538ee6b00ee1d70a504
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 1018B
                                                                                                                                                                                                                                                                                                                              • SHA256 5d05f844fe2e0ff608da278bcdd48055a774791dc903aceef8f0f34b8a7a58fa
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 589955bd3cf55eb05ac6c5b6301350018d5d35f740472cc6b6aec6b28f5b0b3e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 fa3ef017353dc2ee81da9a2d378b7766960ff9867efe4c25bbc02139c5c9e6c7
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e094a20a26444684d7f31bda543ef526d3667fa9afaac38c4414dc8904284024
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 96e839a35aa9fca05e04b76dc579568102680392686d79475ccbaf802cbbb7b7
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 956fc81be190c53c2d3c3c50cdb288b461e61ec60d13c9f70d71e70db8781c9a
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 8cfd8b7b8bd191a42ee485b0e342798bd5bbf119d73876c2ce982fc852e570e0
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 e3c47d1325985c4d1975d04edcd525af2c982995cf70bae0cc6c36e3889ecea6
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 818011e3dd8744dd43351c871955a64d09c59ff1f1a5f9bd2cef7739dfe952a5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4eec1d128a243a8c2a9899b115883add45aefd5d3ce92bb63aa1036565d9bc79
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 0bef7bd8217b61ef1faed2defa0feffd5b366a604bfd8c786f0d0ac8a42cde5e
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                                                                                                                              • SHA256 c1296b79ef6625149fcea95d5b1156cc7ab110495b8ecbc8f718ba33e1225fcd
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3a219556fd1e137e2593c70576126019e1091349c2ab8d8b63018255272d8708
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 647B
                                                                                                                                                                                                                                                                                                                              • SHA256 d679d35292b97db68fddc27d19f865c95587687bfd8302c55afb7111e1ee507d
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 677ce60f1a51696a4c2b512840148838d783611c56c13e94cb02168fe1f7fcb7
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 200B
                                                                                                                                                                                                                                                                                                                              • SHA256 673464b42a282183cdf7ff4b0b981f221be2c1b6364db75f70519344d6daacdd
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.1.211003062
                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                              • SHA256 5a4dcfd3cd3b3f8c0ff4124b219ee11579ad5e87fcc271db30c02f44df3da563
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              ssdfp6928.2.539959611
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6928.2.539959611
                                                                                                                                                                                                                                                                                                                              • Size 217B
                                                                                                                                                                                                                                                                                                                              • SHA256 bc8b599f99174daa0c0ea1e61d7acaf2c795e35185a76a0244db365b891a5504
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 c3a4161c23245c400d5a6756d3090fd55d27b59b425fdc831135eedc3ca267cc
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                              • SHA256 84cf350e3f9ef67ab78e2f2555705395204fc5be97542bb4b7c22ff8a6267c6c
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              assistant_prefs.json
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                                                                                                                                                                                                                                                                                                              • Size 151B
                                                                                                                                                                                                                                                                                                                              • SHA256 b30e0507b0850917878f70636b7e150a94fd30b09083aa8f5243b3c30272f9af
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              BonziBuddy2.lnk
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\Desktop\BonziBuddy2.lnk
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 4acfc45797aafe0c233453e02ffff08b7766fee6a4d24038d9845516ad7c44da
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              BonziBuddy3.lnk
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\Desktop\BonziBuddy3.lnk
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 7582a3b913d834118b942ff4c3931b97f8256b66497f939ccb76a31c21ed34f4
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              BonziBuddy4.lnk
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\Desktop\BonziBuddy4.lnk
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 57db8bb0cac2ec89b195e1f80477e1b45a70b9ef6c10a10a320bce8e86813490
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              TLauncher-Installer-1.9.5.1.exe
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe
                                                                                                                                                                                                                                                                                                                              • Size 25.5MB
                                                                                                                                                                                                                                                                                                                              • SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              desktop.ini
                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\Videos\Captures\desktop.ini
                                                                                                                                                                                                                                                                                                                              • Size 190B
                                                                                                                                                                                                                                                                                                                              • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              LICENSE
                                                                                                                                                                                                                                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6444_1569672108\LICENSE
                                                                                                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                                                                                                              • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Bonzi.acs
                                                                                                                                                                                                                                                                                                                              • Path C:\Windows\msagent\chars\Bonzi.acs
                                                                                                                                                                                                                                                                                                                              • Size 5.0MB
                                                                                                                                                                                                                                                                                                                              • SHA256 f3d4425238b5f68b4d41ed5be271d2f4118a245baf808a62dc1a9e6e619b2f95
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              Peedy.acs
                                                                                                                                                                                                                                                                                                                              • Path C:\Windows\msagent\chars\Peedy.acs
                                                                                                                                                                                                                                                                                                                              • Size 4.0MB
                                                                                                                                                                                                                                                                                                                              • SHA256 b8112187525051bfade06cb678390d52c79555c960202cc5bbf5901fbc0853c5
                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                                                                                                              memory/1344-3444-0x0000000000A30000-0x0000000001031000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/1344-3445-0x0000000000A30000-0x0000000001031000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/1344-4149-0x0000000000A30000-0x0000000001031000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/1344-2824-0x0000000000A30000-0x0000000001031000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4284-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4278-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4392-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4404-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4434-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4165-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4227-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4239-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4254-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4253-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4286-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4299-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4281-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4401-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4276-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4275-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4273-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4270-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4665-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4663-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4272-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4547-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4366-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4444-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/2584-4443-0x0000022053B80000-0x0000022053B81000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/4692-1349-0x0000000000400000-0x0000000000424000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/4692-1091-0x0000000000400000-0x0000000000424000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/5312-4139-0x0000000000400000-0x0000000000420000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/5680-4123-0x0000000000860000-0x0000000000E57000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/5680-4381-0x0000000000860000-0x0000000000E57000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/5680-7244-0x0000000000860000-0x0000000000E57000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/5680-3429-0x0000000000860000-0x0000000000E57000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/5680-4164-0x0000000000860000-0x0000000000E57000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4753-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4936-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4673-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4723-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4741-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4877-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4768-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4790-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4777-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4756-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4804-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4798-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4795-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4809-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4830-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4672-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4811-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4824-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4950-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-5048-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4849-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-5050-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-5055-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-5066-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-5108-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-5131-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-5144-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4814-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4817-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-5149-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-5185-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                                                                                                              memory/6620-4846-0x0000013904C30000-0x0000013904C31000-memory.dmp
                                                                                                                                                                                                                                                                                                                              Download