Overview

overview

9

Static

static

1

URLScan

urlscan

1

https://yandex.com

windows10-ltsc_2021-x64

7

https://yandex.com

windows11-ltsc_2024-x64

9

Resubmissions

13/09/2026, 03:51

260913-eekzsseg346

28/08/2026, 00:36

260828-ayb4sa1yh16

28/08/2026, 00:15

260828-aj7bdabd449

Analysis

  • user interaction
    yes
  • max time kernel
    325s
  • max time network
    581s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/08/2026, 00:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://yandex.com
  • Sample260828-aj7bdabd44
Score
9/10
adwarebootkitdefense_evasiondiscoveryevasionexecutionpersistenceprivilege_escalationransomwarespywarestealertrojan

Malware Config

Signatures

  • Contacts a large (17917) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Modifies boot configuration data using bcdedit 1 TTPs 2 IoCs
    ransomwareevasion
  • Badlisted process makes network request 7 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 6 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 4 IoCs
  • Drops file in Drivers directory 9 IoCs
  • Sets service image path in registry 3 TTPs 9 IoCs

    This determines the executable launched when a service starts. It can be used to establish persistence.

    persistence
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies system executable filetype association 2 TTPs 2 IoCs
    persistence
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Unexpected DNS network traffic destination 2 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Adds Run key to start application 2 TTPs 5 IoCs
    persistence
  • Checks for any installed AV software in registry 1 TTPs 33 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
    defense_evasiontrojan
  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

    execution
  • Contacts third-party web service commonly abused for C2 1 TTPs 14 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 28 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Looks up external IP address via web service 1 TTPs 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery
  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

    discovery
  • Writes to the Master Boot Record (MBR) 1 TTPs 3 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 5 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 60 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 62 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Modifies trusted root certificate store through registry 1 TTPs 15 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion
  • System Location Discovery: System Language Discovery 1 TTPs 37 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 28 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 51 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 64 IoCs
    defense_evasionspywaretrojan
  • NTFS ADS 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 18 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 25 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://yandex.com
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1188
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffbe17bc188,0x7ffbe17bc194,0x7ffbe17bc1a0
      2⤵
        PID:6044
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,14634000496952493696,13013538367148167369,262144 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:2
        2⤵
          PID:2276
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,6150644865565998852,2062921577051399858,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:11
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:2476
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,7754596970152001732,6584101229568318071,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=2796 /prefetch:13
          2⤵
            PID:4512
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,13685274184468609883,17730251073228065591,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
            2⤵
              PID:4252
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,11849818602929149416,16099182846414480665,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
              2⤵
                PID:5544
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,17606066628975506331,2288115590951589291,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
                2⤵
                  PID:940
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,12744648991209406097,16747290492862269534,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:9
                  2⤵
                    PID:4372
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,6751151080470019036,15366762038325249561,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
                    2⤵
                      PID:5316
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,8300416088320964833,125527578432268185,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
                      2⤵
                        PID:2308
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,8117322827375691147,5671241928808768457,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:14
                        2⤵
                          PID:2204
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,8467347537536770782,3810701926921645530,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
                          2⤵
                            PID:2300
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,8467347537536770782,3810701926921645530,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
                            2⤵
                              PID:5364
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,5283033897484997656,1822607521183522820,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
                              2⤵
                                PID:2232
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,7450643337566686030,6695621475940207653,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
                                2⤵
                                  PID:964
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,2606871642957305454,10032966348617575833,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:14
                                  2⤵
                                    PID:3936
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2936,i,12249390915181330955,11837486116529148309,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:14
                                    2⤵
                                      PID:5068
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,14070604975233722491,10333898494998426879,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:14
                                      2⤵
                                        PID:4352
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6316,i,12667219689891325651,3956850128938206382,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:1
                                        2⤵
                                          PID:1968
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4248,i,1011323440180813312,15139626384925775144,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
                                          2⤵
                                            PID:2792
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6644,i,3596486133801761534,7518805961116218417,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:1
                                            2⤵
                                              PID:2908
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=1620,i,17646881461486341238,11518603562767118321,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:1
                                              2⤵
                                                PID:3620
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=4296,i,9822356122627541347,7066469515557385172,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:1
                                                2⤵
                                                  PID:3092
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=3644,i,8354816450900131619,5475696950502425078,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:1
                                                  2⤵
                                                    PID:4528
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7388,i,17337027409149214757,12414727894277610084,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:1
                                                    2⤵
                                                      PID:4484
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6200,i,9229294225767061309,1148402911278293731,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:1
                                                      2⤵
                                                        PID:3392
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4252,i,6316036968743129662,1007300787653030163,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=7448 /prefetch:1
                                                        2⤵
                                                          PID:6096
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,6344892666606134406,5821629740542769702,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:14
                                                          2⤵
                                                            PID:5228
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6672,i,4331449508543597434,8580894807920873859,2097152 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:1
                                                            2⤵
                                                              PID:240
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7744,i,937901065720144301,13401872862468488723,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:14
                                                              2⤵
                                                                PID:4964
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7892,i,13563885334451801207,9446022963960592678,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=7896 /prefetch:14
                                                                2⤵
                                                                  PID:3440
                                                                • C:\Users\Admin\Downloads\MediaGet.exe
                                                                  "C:\Users\Admin\Downloads\MediaGet.exe"
                                                                  2⤵
                                                                  • Downloads MZ/PE file
                                                                  • Executes dropped EXE
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Modifies Internet Explorer settings
                                                                  • Suspicious use of SetWindowsHookEx
                                                                  PID:2040
                                                                  • C:\Users\Admin\MediaGet2\mediaget.exe
                                                                    "C:\Users\Admin\MediaGet2\mediaget.exe" --installer
                                                                    3⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Adds Run key to start application
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Modifies registry class
                                                                    • Suspicious behavior: AddClipboardFormatListener
                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                    • Suspicious use of FindShellTrayWindow
                                                                    • Suspicious use of SetWindowsHookEx
                                                                    PID:2520
                                                                    • C:\Users\Admin\MediaGet2\mediaget_crashpad_handler.exe
                                                                      C:\Users\Admin\MediaGet2\mediaget_crashpad_handler.exe --no-rate-limit "--database=C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps" "--metrics-dir=C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps" "--attachment=C:/Users/Admin/AppData/Local/Media Get LLC/MediaGet2/crashdumps/logs/log" "--attachment=C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps\a7acc2dd-ace8-40be-a2b7-cac801915253.run\__sentry-event" "--attachment=C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps\a7acc2dd-ace8-40be-a2b7-cac801915253.run\__sentry-breadcrumb1" "--attachment=C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps\a7acc2dd-ace8-40be-a2b7-cac801915253.run\__sentry-breadcrumb2" --initial-client-data=0x784,0x788,0x78c,0x760,0x790,0x6ec77b7c,0x6ec77b90,0x6ec77ba0
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:1812
                                                                    • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
                                                                      "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=utility --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --lang=en-US --service-sandbox-type=network --application-name=MediaGet2 --webengine-schemes=qrc:sLV --mojo-platform-channel-handle=3212 /prefetch:8
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Modifies trusted root certificate store through registry
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Modifies system certificate store
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:4252
                                                                    • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
                                                                      "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --disable-gpu-compositing --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=4092 /prefetch:1
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:6688
                                                                    • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
                                                                      "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --disable-gpu-compositing --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=4596 /prefetch:1
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:6908
                                                                    • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
                                                                      "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --disable-gpu-compositing --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=4760 /prefetch:1
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:6948
                                                                    • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
                                                                      "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --disable-gpu-compositing --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=4904 /prefetch:1
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:5408
                                                                    • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
                                                                      "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --disable-gpu-compositing --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=5292 /prefetch:1
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:2644
                                                                  • C:\Users\Admin\AppData\Local\Temp\bdvpn\bdvpn_setup.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\bdvpn\bdvpn_setup.exe" /Silent=yes /Affiliate=mediaget_wizzard_offer_wizard_8y262
                                                                    3⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Adds Run key to start application
                                                                    • Drops file in Program Files directory
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                    PID:1816
                                                                    • C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\brightvpn_installer.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\brightvpn_installer.exe" /pid=1816 /port=6451 /affiliate=mediaget_wizzard_offer_wizard_8y262 /silent=yes /exe="C:\Users\Admin\AppData\Local\Temp\bdvpn\bdvpn_setup.exe" /appid="win_brightvpn.com"
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                      PID:2092
                                                                    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                                                                      powershell -Command "(Get-Content -Path 'C:\Program Files (x86)\Bright VPN\native_host_manifest_tmp.json') -replace 'EXE_PATH', 'C:\\Program Files (x86)\\Bright VPN\\BrightVpnNativeMessagingHost.exe' | Set-Content -Path 'C:\Program Files (x86)\Bright VPN\host_manifest.json'"
                                                                      4⤵
                                                                      • Command and Scripting Interpreter: PowerShell
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                      PID:1068
                                                                    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                                                                      powershell -Command "(Get-Content -Path 'C:\Program Files (x86)\Bright VPN\native_host_manifest_firefox_tmp.json') -replace 'EXE_PATH', 'C:\\Program Files (x86)\\Bright VPN\\BrightVpnNativeMessagingHost.exe' | Set-Content -Path 'C:\Program Files (x86)\Bright VPN\host_manifest_firefox.json'"
                                                                      4⤵
                                                                      • Command and Scripting Interpreter: PowerShell
                                                                      • Drops file in Program Files directory
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                      PID:828
                                                                    • C:\Program Files (x86)\Bright VPN\net_updater64.exe
                                                                      "C:\Program Files (x86)\Bright VPN\net_updater64.exe" --install win_brightvpn.com --affiliate mediaget_wizzard_offer_wizard_8y262
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      PID:8828
                                                                    • C:\Program Files (x86)\Bright VPN\Bright VPN.exe
                                                                      "C:\Program Files (x86)\Bright VPN\Bright VPN.exe" --install
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • Checks processor information in registry
                                                                      • NTFS ADS
                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                      • Suspicious use of FindShellTrayWindow
                                                                      PID:8332
                                                                      • C:\Windows\system32\cmd.exe
                                                                        C:\Windows\system32\cmd.exe /d /s /c "wmic csproduct get vendor, name"
                                                                        5⤵
                                                                        • Executes a command shell one-liner
                                                                        PID:9056
                                                                        • C:\Windows\System32\Wbem\WMIC.exe
                                                                          wmic csproduct get vendor, name
                                                                          6⤵
                                                                          • Suspicious use of AdjustPrivilegeToken
                                                                          PID:9208
                                                                      • C:\Windows\system32\cmd.exe
                                                                        C:\Windows\system32\cmd.exe /d /s /c "rasdial "
                                                                        5⤵
                                                                        • Executes a command shell one-liner
                                                                        PID:6940
                                                                        • C:\Windows\system32\rasdial.exe
                                                                          rasdial
                                                                          6⤵
                                                                            PID:896
                                                                        • C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\test_wpf.exe
                                                                          C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\test_wpf.exe
                                                                          5⤵
                                                                          • Executes dropped EXE
                                                                          • System Location Discovery: System Language Discovery
                                                                          PID:4472
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:7000
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                            PID:10272
                                                                        • C:\Program Files (x86)\Bright VPN\Bright VPN.exe
                                                                          "C:\Program Files (x86)\Bright VPN\Bright VPN.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\bright-vpn" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3412 --field-trial-handle=3476,i,11214850574287552901,9395526659774085475,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                                                                          5⤵
                                                                          • Executes dropped EXE
                                                                          PID:7588
                                                                        • C:\Program Files (x86)\Bright VPN\Bright VPN.exe
                                                                          "C:\Program Files (x86)\Bright VPN\Bright VPN.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\bright-vpn" --mojo-platform-channel-handle=3848 --field-trial-handle=3476,i,11214850574287552901,9395526659774085475,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                                                                          5⤵
                                                                          • Executes dropped EXE
                                                                          PID:6744
                                                                        • C:\Program Files (x86)\Bright VPN\Bright VPN.exe
                                                                          "C:\Program Files (x86)\Bright VPN\Bright VPN.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\bright-vpn" --app-path="C:\Program Files (x86)\Bright VPN\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=4072 --field-trial-handle=3476,i,11214850574287552901,9395526659774085475,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                                                                          5⤵
                                                                          • Executes dropped EXE
                                                                          PID:7460
                                                                        • C:\Program Files (x86)\Bright VPN\net_updater64.exe
                                                                          "C:\Program Files (x86)\Bright VPN\net_updater64.exe" --install win_brightvpn.com --no-cleanup
                                                                          5⤵
                                                                          • Badlisted process makes network request
                                                                          • Executes dropped EXE
                                                                          PID:10676
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:9560
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:8680
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:7496
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:896
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:7504
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:8796
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:11148
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:1372
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:8988
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:4156
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:4840
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:7328
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:8276
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:8132
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:7876
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:4488
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:10676
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:6252
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:956
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:9104
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:9020
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:2728
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:9520
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:2564
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:9016
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:4812
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:6628
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:6980
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:10680
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:3624
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:4560
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:10552
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:6444
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:9540
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:9172
                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                            6⤵
                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                            PID:9844
                                                                        • C:\Windows\system32\cmd.exe
                                                                          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                          5⤵
                                                                          • Executes a command shell one-liner
                                                                          PID:6860
                                                                          • C:\Windows\System32\Conhost.exe
                                                                            \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                            6⤵
                                                                              PID:2628
                                                                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                              6⤵
                                                                              • Hide Artifacts: Ignore Process Interrupts
                                                                              PID:9704
                                                                          • C:\Windows\system32\cmd.exe
                                                                            C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                            5⤵
                                                                            • Executes a command shell one-liner
                                                                            PID:8792
                                                                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                              6⤵
                                                                              • Hide Artifacts: Ignore Process Interrupts
                                                                              PID:8464
                                                                          • C:\Windows\system32\cmd.exe
                                                                            C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                            5⤵
                                                                            • Executes a command shell one-liner
                                                                            PID:6360
                                                                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                              6⤵
                                                                              • Hide Artifacts: Ignore Process Interrupts
                                                                              PID:10592
                                                                          • C:\Windows\system32\cmd.exe
                                                                            C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                            5⤵
                                                                            • Executes a command shell one-liner
                                                                            PID:3628
                                                                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                              6⤵
                                                                              • Hide Artifacts: Ignore Process Interrupts
                                                                              PID:10340
                                                                          • C:\Windows\system32\cmd.exe
                                                                            C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                            5⤵
                                                                            • Executes a command shell one-liner
                                                                            PID:7260
                                                                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                              6⤵
                                                                              • Hide Artifacts: Ignore Process Interrupts
                                                                              PID:9812
                                                                          • C:\Program Files (x86)\Bright VPN\Bright VPN.exe
                                                                            "C:\Program Files (x86)\Bright VPN\Bright VPN.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\bright-vpn" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2256 --field-trial-handle=3476,i,11214850574287552901,9395526659774085475,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                                                                            5⤵
                                                                              PID:5436
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:7024
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:8844
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:6388
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:6296
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:7836
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:8708
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:4240
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:8584
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:4488
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:8848
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:7500
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:10852
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:9332
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:6928
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:10140
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:10532
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:7108
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:5436
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:7144
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:3512
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:9876
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:6240
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:9724
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:1132
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:11144
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:4628
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:10672
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:600
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:7332
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:6928
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:8680
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:3508
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:10736
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:5552
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:8844
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:6416
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:3512
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:4856
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:9208
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:7708
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:9768
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:7880
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:9052
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:7856
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:8364
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:7212
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:9528
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:9312
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:10100
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:7748
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:5552
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:9464
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:5084
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:4692
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:7304
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:3112
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:3060
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:10172
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:5916
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:5104
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:1276
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:8296
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:9852
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:8756
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:960
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:10976
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:4760
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:4284
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:2592
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:5176
                                                                            • C:\Windows\system32\cmd.exe
                                                                              C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status""
                                                                              5⤵
                                                                              • Executes a command shell one-liner
                                                                              PID:10584
                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                powershell -NoProfile -NonInteractive -Command "(Get-Service -Name 'luminati_net_updater_win_brightvpn_com' -ErrorAction SilentlyContinue).Status"
                                                                                6⤵
                                                                                • Hide Artifacts: Ignore Process Interrupts
                                                                                PID:2632
                                                                        • C:\Users\Admin\AppData\Local\Temp\opera\opera_binst.exe
                                                                          "C:\Users\Admin\AppData\Local\Temp\opera\opera_binst.exe" --silent --allusers=0
                                                                          3⤵
                                                                          • Executes dropped EXE
                                                                          • System Location Discovery: System Language Discovery
                                                                          PID:2676
                                                                          • C:\Users\Admin\AppData\Local\Temp\7zS47A53DEB\installer.exe
                                                                            C:\Users\Admin\AppData\Local\Temp\7zS47A53DEB\installer.exe --silent --allusers=0 --server-tracking-blob=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
                                                                            4⤵
                                                                            • Downloads MZ/PE file
                                                                            • Executes dropped EXE
                                                                            • Enumerates connected drives
                                                                            • Enumerates system info in registry
                                                                            PID:4764
                                                                            • C:\Users\Admin\AppData\Local\Temp\7zS47A53DEB\installer.exe
                                                                              C:\Users\Admin\AppData\Local\Temp\7zS47A53DEB\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.55 --initial-client-data=0x2bc,0x2c0,0x2c4,0x298,0x2c8,0x7ff748d0f608,0x7ff748d0f618,0x7ff748d0f628
                                                                              5⤵
                                                                              • Executes dropped EXE
                                                                              PID:824
                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\installer.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\installer.exe" --version
                                                                              5⤵
                                                                              • Executes dropped EXE
                                                                              PID:4356
                                                                            • C:\Users\Admin\AppData\Local\Temp\7zS47A53DEB\installer.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\7zS47A53DEB\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4764 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_20260828011818" --session-guid=f426a09b-8490-4b5a-951b-29f291ad9732 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=4808000000000000
                                                                              5⤵
                                                                              • Executes dropped EXE
                                                                              • Enumerates connected drives
                                                                              • Enumerates system info in registry
                                                                              PID:6040
                                                                              • C:\Users\Admin\AppData\Local\Temp\7zS47A53DEB\installer.exe
                                                                                C:\Users\Admin\AppData\Local\Temp\7zS47A53DEB\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.55 --initial-client-data=0x2b0,0x2b4,0x2b8,0x28c,0x2c8,0x7ff748d0f608,0x7ff748d0f618,0x7ff748d0f628
                                                                                6⤵
                                                                                • Executes dropped EXE
                                                                                PID:3524
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.55\installer.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.55\installer.exe" --backend --initial-pid=4764 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181" --session-guid=f426a09b-8490-4b5a-951b-29f291ad9732 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=135.0.5973.55
                                                                                6⤵
                                                                                • Executes dropped EXE
                                                                                • Enumerates connected drives
                                                                                • Enumerates system info in registry
                                                                                • Modifies registry class
                                                                                PID:9828
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.55\installer.exe
                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.55\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.55 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff66c70f608,0x7ff66c70f618,0x7ff66c70f628
                                                                                  7⤵
                                                                                  • Executes dropped EXE
                                                                                  PID:9860
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                                                                                  7⤵
                                                                                  • Executes dropped EXE
                                                                                  • Adds Run key to start application
                                                                                  • Drops file in Windows directory
                                                                                  • Checks processor information in registry
                                                                                  • Enumerates system info in registry
                                                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                  PID:10040
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.55\opera_crashreporter.exe
                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.55 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffbb832bcb0,0x7ffbb832bcc0,0x7ffbb832bcd0
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    PID:10920
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1896,i,13145099552355627449,14015888401104021958,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2184 /prefetch:11
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • System Time Discovery
                                                                                    PID:7756
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1688,i,2529096975244244825,6305165991725937863,262144 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2088 /prefetch:2
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    PID:7772
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2476,i,9941317976539966596,6347540265580511604,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2668 /prefetch:13
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:2864
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2920,i,11884403975066687484,15530128606007474017,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3144 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    PID:5224
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2936,i,13790985710610471129,1335429063469488246,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3192 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:7880
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2912,i,11199642305515972370,5242248463439758800,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3172 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:6472
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2964,i,14115448588018680271,7952306010490748042,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3232 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:8068
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2980,i,3033337938261397660,16876703902364111459,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3272 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:1372
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2952,i,7786300092988444526,6856268660902109382,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3212 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:8072
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2976,i,17509300653556202026,11533698744985850060,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3252 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:8060
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3096,i,14447085564257328363,3657358636705260705,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3308 /prefetch:1
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    PID:8076
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.55\opera_gx_splash.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.55\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                    PID:6260
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4688,i,13226611922910231069,5695759539380657230,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4596 /prefetch:9
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:8880
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4896,i,15314309496945556607,6956456902282054399,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4908 /prefetch:1
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:8948
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5112,i,6354733398354454771,1837962172675420090,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5136 /prefetch:1
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:8924
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5260,i,2784092193581381181,11337284792916492357,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5280 /prefetch:1
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:7140
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5828,i,3004181041362990382,8392412618255723199,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5888 /prefetch:9
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:3748
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6504,i,6918747549979340356,5217046023495997516,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6592 /prefetch:9
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:700
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3284,i,10514292926720781943,4938586073407083604,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5508 /prefetch:9
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:3368
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5860,i,1767470668530633305,11684699058377213870,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=4004 /prefetch:12
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:11120
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3768,i,9727039216760204633,15536045124904994149,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=3788 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:2704
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3764,i,17912708078519089180,7982341641639019229,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=3456 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    PID:8984
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6552,i,15785760094639720380,15257866490347832772,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=3660 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:2628
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3140,i,828018523884346659,8871537173037644424,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=3592 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    PID:6392
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3468,i,6816460284419259179,8037241931081922529,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=3604 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:8808
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3740,i,2468045544585721758,14566494362180648496,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=3628 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:6588
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6944,i,13114475757939560850,6272174870395111608,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=6768 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:8952
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7052,i,494725029555398233,12655675762327742657,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7048 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    • Enumerates system info in registry
                                                                                    PID:8744
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7088,i,1895018403991495350,7812299510847354269,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7100 /prefetch:14
                                                                                    8⤵
                                                                                    • Executes dropped EXE
                                                                                    PID:9000
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6480,i,12832585826468262486,8316330568876984121,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=7380 /prefetch:1
                                                                                    8⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:7284
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7516,i,13384812400476618465,2777680954401883711,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=7532 /prefetch:14
                                                                                    8⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:6956
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7364,i,969292469501353805,3434826942358801632,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=7656 /prefetch:14
                                                                                    8⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:8524
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7044,i,1329767468863802331,7603803395921502205,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=7700 /prefetch:14
                                                                                    8⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:8480
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7664,i,16012551652362994142,8115572614105266384,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=7724 /prefetch:14
                                                                                    8⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:8492
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7692,i,4407594052851155616,14265004902369149120,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=7744 /prefetch:14
                                                                                    8⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:8844
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7696,i,8019656249154403500,1637216242608607434,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=7764 /prefetch:14
                                                                                    8⤵
                                                                                      PID:6036
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7852,i,6304632029920914138,13744530229463355303,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=8372 /prefetch:14
                                                                                      8⤵
                                                                                      • Enumerates system info in registry
                                                                                      PID:7340
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8392,i,3565482118357759526,6255143347469823,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=8380 /prefetch:14
                                                                                      8⤵
                                                                                        PID:7304
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8616,i,11947950816585111590,5862317541708158912,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=8640 /prefetch:14
                                                                                        8⤵
                                                                                        • Enumerates system info in registry
                                                                                        PID:7148
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8748,i,12403408485238359871,4239275866621581747,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=8772 /prefetch:14
                                                                                        8⤵
                                                                                        • Enumerates system info in registry
                                                                                        PID:4840
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                                                        8⤵
                                                                                        • Enumerates system info in registry
                                                                                        PID:9512
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.55 --initial-client-data=0x25c,0x260,0x264,0x238,0x268,0x7ff79839c278,0x7ff79839c288,0x7ff79839c298
                                                                                          9⤵
                                                                                            PID:10816
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9004,i,10861652795674782284,1687275404381003132,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=8988 /prefetch:14
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:6156
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9064,i,9834370810993113020,12533435255455215320,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=6572 /prefetch:14
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:10812
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9404,i,17814019453904603752,11357528124507405896,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=9448 /prefetch:9
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:11028
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9576,i,4858554918756996922,12756316169924311078,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=9588 /prefetch:14
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:688
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7804,i,15525858799485562275,10872686175390471,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=7788 /prefetch:14
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:7144
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7824,i,17939997708206042822,14533333866449905963,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=7948 /prefetch:14
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:4964
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9320,i,10130260771810381206,15651202188296276939,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=9252 /prefetch:14
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:4348
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10572,i,11980100307729882147,7065308247223331907,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10592 /prefetch:14
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:2428
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9324,i,13813755589649378290,17333601563653249579,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9200 /prefetch:14
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:7856
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8520,i,2797585078417885865,3891317440511115434,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=9280 /prefetch:14
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:7240
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10488,i,9793648954221832460,6568856684785471618,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=10616 /prefetch:14
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:9196
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10180,i,4164331684610268118,958956053184304311,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=10252 /prefetch:14
                                                                                          8⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:2264
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10456,i,12492195213367089217,1212501519225208523,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=9264 /prefetch:14
                                                                                          8⤵
                                                                                            PID:9980
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9248,i,11240952959308045050,15939772078355532056,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=10028 /prefetch:14
                                                                                            8⤵
                                                                                              PID:5900
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10252,i,3201523658801658515,4819542772179411726,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=9568 /prefetch:9
                                                                                              8⤵
                                                                                                PID:10364
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10496,i,2119058969770250795,1703351972806883477,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10256 /prefetch:14
                                                                                                8⤵
                                                                                                  PID:10656
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10392,i,10514861247990378144,14020871234079867005,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=10388 /prefetch:14
                                                                                                  8⤵
                                                                                                    PID:2428
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=2732,i,12585943414215074206,13058889852975638637,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=5556 /prefetch:9
                                                                                                    8⤵
                                                                                                      PID:2876
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=10328,i,7246611928135136810,5140979746045658518,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=9244 /prefetch:9
                                                                                                      8⤵
                                                                                                        PID:6220
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10384,i,12679170897707333902,2142118304852070307,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=6676 /prefetch:14
                                                                                                        8⤵
                                                                                                          PID:10116
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=8412,i,3743327269158563521,11916214187785561505,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=10488 /prefetch:9
                                                                                                          8⤵
                                                                                                            PID:9768
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3908,i,3326782131648882245,14039133899184872453,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=5668 /prefetch:14
                                                                                                            8⤵
                                                                                                              PID:8076
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10328,i,10563480847463496867,11573687723286248665,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=10092 /prefetch:14
                                                                                                              8⤵
                                                                                                                PID:4844
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAAAAAAAAAAAADgAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAADAAAAAEAAAAAAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=d3d11-warp-webgl --metrics-shmem-handle=6436,i,8191794833968321718,14393555550889553330,262144 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=10092 /prefetch:10
                                                                                                                8⤵
                                                                                                                • Network Service Discovery
                                                                                                                PID:2240
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=6436,i,6457958562369165759,10958608136349529290,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=10624 /prefetch:9
                                                                                                                8⤵
                                                                                                                  PID:9852
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6944,i,9119351342411648554,12040806473940726225,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=2704 /prefetch:14
                                                                                                                  8⤵
                                                                                                                    PID:9300
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=6616,i,8941407743320017333,17401889474874282767,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=8408 /prefetch:9
                                                                                                                    8⤵
                                                                                                                      PID:2368
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3156,i,12570081432628261478,2991521735131564763,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=3632 /prefetch:14
                                                                                                                      8⤵
                                                                                                                        PID:4348
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5092,i,10907182972383735951,13855792708288201693,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=9244 /prefetch:14
                                                                                                                        8⤵
                                                                                                                          PID:8016
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=6868,i,8754266606564967582,14630095023357003013,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=6864 /prefetch:9
                                                                                                                          8⤵
                                                                                                                            PID:10860
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6864,i,14430709517371677514,2523434327023058991,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=6888 /prefetch:14
                                                                                                                            8⤵
                                                                                                                              PID:2880
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10252,i,1799551320751322724,15295154947762415825,524288 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=8796 /prefetch:14
                                                                                                                              8⤵
                                                                                                                                PID:8464
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=10696,i,5900317753190580157,7238173921367967061,2097152 --field-trial-handle=2092,i,11816056145063273258,729582693062966116,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,3185543350212026170,14528436887421908628,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=7900 /prefetch:9
                                                                                                                                8⤵
                                                                                                                                  PID:1572
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                                                                                                            5⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            PID:8704
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181\assistant\assistant_installer.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181\assistant\assistant_installer.exe" --version
                                                                                                                            5⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            • Enumerates system info in registry
                                                                                                                            PID:8912
                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181\assistant\assistant_installer.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xef4040,0xef404c,0xef4058
                                                                                                                              6⤵
                                                                                                                              • Executes dropped EXE
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:7116
                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\antivirus360\antivirus360.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\antivirus360\antivirus360.exe" /s
                                                                                                                        3⤵
                                                                                                                        • Downloads MZ/PE file
                                                                                                                        • Executes dropped EXE
                                                                                                                        • Loads dropped DLL
                                                                                                                        • Writes to the Master Boot Record (MBR)
                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                                                                        • Suspicious use of FindShellTrayWindow
                                                                                                                        PID:984
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\antivirus360\360TS_Setup.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\antivirus360\360TS_Setup.exe" /c:WW.Mediaget.CPI202204 /pmode:2 /s /promo:eyJib290dGltZSI6IjciLCJtZWRhbCI6IjciLCJuZXdzIjoiMCIsIm9wZXJhIjoiNyIsIm9wZXJhX2lucyI6IjAiLCJwb3B1cCI6IjciLCJyZW1pbmRlciI6IjciLCJ1cGdyYWRlX25vdyI6IjAifQo=
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                          PID:7816
                                                                                                                          • C:\Program Files (x86)\1787876376_0\360TS_Setup.exe
                                                                                                                            "C:\Program Files (x86)\1787876376_0\360TS_Setup.exe" /c:WW.Mediaget.CPI202204 /pmode:2 /s /promo:eyJib290dGltZSI6IjciLCJtZWRhbCI6IjciLCJuZXdzIjoiMCIsIm9wZXJhIjoiNyIsIm9wZXJhX2lucyI6IjAiLCJwb3B1cCI6IjciLCJyZW1pbmRlciI6IjciLCJ1cGdyYWRlX25vdyI6IjAifQo= /TSinstall
                                                                                                                            5⤵
                                                                                                                            • Drops file in Drivers directory
                                                                                                                            • Sets service image path in registry
                                                                                                                            • Executes dropped EXE
                                                                                                                            • Adds Run key to start application
                                                                                                                            • Checks for any installed AV software in registry
                                                                                                                            • Checks whether UAC is enabled
                                                                                                                            • Writes to the Master Boot Record (MBR)
                                                                                                                            • Drops file in Program Files directory
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            • Checks processor information in registry
                                                                                                                            • Modifies registry class
                                                                                                                            • Suspicious behavior: LoadsDriver
                                                                                                                            PID:3220
                                                                                                                            • C:\Windows\system32\bcdedit.exe
                                                                                                                              "C:\Windows\system32\bcdedit.exe" /set {bootmgr} flightsigning on
                                                                                                                              6⤵
                                                                                                                              • Modifies boot configuration data using bcdedit
                                                                                                                              PID:10344
                                                                                                                            • C:\Windows\system32\bcdedit.exe
                                                                                                                              "C:\Windows\system32\bcdedit.exe" /set flightsigning on
                                                                                                                              6⤵
                                                                                                                              • Modifies boot configuration data using bcdedit
                                                                                                                              PID:9228
                                                                                                                            • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\360\Total Security\MenuEx64.dll"
                                                                                                                              6⤵
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:10828
                                                                                                                              • C:\Windows\system32\regsvr32.exe
                                                                                                                                /s "C:\Program Files (x86)\360\Total Security\MenuEx64.dll"
                                                                                                                                7⤵
                                                                                                                                • Modifies system executable filetype association
                                                                                                                                • Modifies registry class
                                                                                                                                PID:9544
                                                                                                                            • C:\Program Files (x86)\360\Total Security\Utils\PowerSaver.exe
                                                                                                                              "C:\Program Files (x86)\360\Total Security\Utils\PowerSaver.exe" /flightsigning
                                                                                                                              6⤵
                                                                                                                              • Modifies trusted root certificate store through registry
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:7648
                                                                                                                            • C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe
                                                                                                                              "C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe" /installsrv
                                                                                                                              6⤵
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:7568
                                                                                                                            • C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
                                                                                                                              "C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe" /install
                                                                                                                              6⤵
                                                                                                                              • Drops file in Drivers directory
                                                                                                                              • Sets service image path in registry
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:7436
                                                                                                                            • C:\Program Files (x86)\360\Total Security\modules\KB931125-rootsupd.exe
                                                                                                                              "C:\Program Files (x86)\360\Total Security\modules\KB931125-rootsupd.exe"
                                                                                                                              6⤵
                                                                                                                              • Boot or Logon Autostart Execution: Active Setup
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:7196
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe
                                                                                                                                C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe authroots.sst
                                                                                                                                7⤵
                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                • Modifies system certificate store
                                                                                                                                PID:10860
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe
                                                                                                                                C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe updroots.sst
                                                                                                                                7⤵
                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                • Modifies system certificate store
                                                                                                                                PID:10344
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe
                                                                                                                                C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe -l roots.sst
                                                                                                                                7⤵
                                                                                                                                • Modifies trusted root certificate store through registry
                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                • Modifies system certificate store
                                                                                                                                PID:9872
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe
                                                                                                                                C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe -d delroots.sst
                                                                                                                                7⤵
                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                PID:10796
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8028,i,14154909087383585230,10817171969866850093,262144 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=1456 /prefetch:10
                                                                                                                      2⤵
                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                      PID:5152
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6808,i,17559497731627880896,6098914345537023260,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:14
                                                                                                                      2⤵
                                                                                                                        PID:6480
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7272,i,2693006900838996737,9875269629373831781,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
                                                                                                                        2⤵
                                                                                                                          PID:6492
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5644,i,11944249165342522812,374575708626647388,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:14
                                                                                                                          2⤵
                                                                                                                            PID:6660
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2912,i,15966517501803667260,10625322948349272194,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=1096 /prefetch:14
                                                                                                                            2⤵
                                                                                                                              PID:5384
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3424,i,13174780304569492006,2167654923805079728,524288 --field-trial-handle=2408,i,13293414414640152569,5414757773576250962,262144 --variations-seed-version --mojo-platform-channel-handle=3148 /prefetch:14
                                                                                                                              2⤵
                                                                                                                                PID:10584
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                                                                                                2⤵
                                                                                                                                  PID:3356
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffbe17bc188,0x7ffbe17bc194,0x7ffbe17bc1a0
                                                                                                                                    3⤵
                                                                                                                                      PID:6764
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,11052774743208225574,2278794735236706089,524288 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:11
                                                                                                                                      3⤵
                                                                                                                                      • System Time Discovery
                                                                                                                                      PID:5728
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,18062363873470816242,16828129222426933227,262144 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:2
                                                                                                                                      3⤵
                                                                                                                                        PID:10656
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,2154858231305520230,16042234822054685507,524288 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:13
                                                                                                                                        3⤵
                                                                                                                                          PID:10768
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,6118067999452203405,7895215475807956553,524288 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:14
                                                                                                                                          3⤵
                                                                                                                                            PID:8308
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,13772756541300980722,14424392053208993285,524288 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:14
                                                                                                                                            3⤵
                                                                                                                                              PID:7832
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,13772756541300980722,14424392053208993285,524288 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:14
                                                                                                                                              3⤵
                                                                                                                                                PID:8700
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,12577199281478169491,4462234441839409353,524288 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
                                                                                                                                                3⤵
                                                                                                                                                  PID:8372
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,5634475400866887334,2194671254266022974,524288 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
                                                                                                                                                  3⤵
                                                                                                                                                    PID:1848
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,5990583993694287694,10885511145364923090,524288 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
                                                                                                                                                    3⤵
                                                                                                                                                      PID:10368
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,2744320070394842377,12792341561278032675,524288 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
                                                                                                                                                      3⤵
                                                                                                                                                        PID:7124
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,17887398572040349116,3658848191320247231,524288 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
                                                                                                                                                        3⤵
                                                                                                                                                          PID:7132
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,5570708877961187661,11037447509115950726,524288 --field-trial-handle=2056,i,3696297063368827353,18236702409459711687,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
                                                                                                                                                          3⤵
                                                                                                                                                            PID:5256
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                        1⤵
                                                                                                                                                          PID:3528
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                                                                          1⤵
                                                                                                                                                            PID:4188
                                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                                            C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                            1⤵
                                                                                                                                                              PID:1616
                                                                                                                                                            • C:\Windows\SysWOW64\werfault.exe
                                                                                                                                                              werfault.exe /h /shared Global\d86e5af0487b48609997c95531af8ef9 /t 3572 /p 2520
                                                                                                                                                              1⤵
                                                                                                                                                                PID:7864
                                                                                                                                                              • C:\Windows\System32\rundll32.exe
                                                                                                                                                                C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {9BA05972-F6A8-11CF-A442-00A0C90A8F39} -Embedding
                                                                                                                                                                1⤵
                                                                                                                                                                  PID:5968
                                                                                                                                                                • C:\Program Files (x86)\Bright VPN\net_updater64.exe
                                                                                                                                                                  "C:/Program Files (x86)/Bright VPN/net_updater64.exe" --updater win_brightvpn.com
                                                                                                                                                                  1⤵
                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                  • Checks for any installed AV software in registry
                                                                                                                                                                  • Drops file in System32 directory
                                                                                                                                                                  • Modifies data under HKEY_USERS
                                                                                                                                                                  PID:6336
                                                                                                                                                                  • C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\test_wpf.exe
                                                                                                                                                                    C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\test_wpf.exe
                                                                                                                                                                    2⤵
                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                    PID:9140
                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                                                                                                                  1⤵
                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                  PID:9364
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.55 --initial-client-data=0x258,0x25c,0x260,0x234,0x264,0x7ff79839c278,0x7ff79839c288,0x7ff79839c298
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:9240
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:10892
                                                                                                                                                                    • C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe
                                                                                                                                                                      "C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe"
                                                                                                                                                                      1⤵
                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                      PID:5756
                                                                                                                                                                      • C:\Program Files (x86)\360\Total Security\SoftMgr\EaInstHelper64.exe
                                                                                                                                                                        "C:\Program Files (x86)\360\Total Security\SoftMgr\EaInstHelper64.exe" /Install_run
                                                                                                                                                                        2⤵
                                                                                                                                                                        • Drops file in Drivers directory
                                                                                                                                                                        • Sets service image path in registry
                                                                                                                                                                        • Drops file in Windows directory
                                                                                                                                                                        PID:9752
                                                                                                                                                                    • C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
                                                                                                                                                                      "C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe"
                                                                                                                                                                      1⤵
                                                                                                                                                                      • Sets service image path in registry
                                                                                                                                                                      • Unexpected DNS network traffic destination
                                                                                                                                                                      • Adds Run key to start application
                                                                                                                                                                      • Checks for any installed AV software in registry
                                                                                                                                                                      • Checks whether UAC is enabled
                                                                                                                                                                      • Enumerates connected drives
                                                                                                                                                                      • Writes to the Master Boot Record (MBR)
                                                                                                                                                                      • Drops file in System32 directory
                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                      • Modifies data under HKEY_USERS
                                                                                                                                                                      • Suspicious behavior: LoadsDriver
                                                                                                                                                                      PID:10424
                                                                                                                                                                      • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                        C:\Windows\system32\regsvr32.exe /s "C:\Program Files (x86)\360\Total Security\safemon\safemon.dll"
                                                                                                                                                                        2⤵
                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                        PID:6992
                                                                                                                                                                      • C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe
                                                                                                                                                                        "C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe" /watch
                                                                                                                                                                        2⤵
                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                        PID:4752
                                                                                                                                                                    • C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                      C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                      1⤵
                                                                                                                                                                        PID:9948
                                                                                                                                                                      • C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe
                                                                                                                                                                        "C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe"
                                                                                                                                                                        1⤵
                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                        PID:11156
                                                                                                                                                                        • C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe
                                                                                                                                                                          "C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe" /regav:1_1 /regas:1_1
                                                                                                                                                                          2⤵
                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                          PID:956
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                        1⤵
                                                                                                                                                                          PID:9004

                                                                                                                                                                        Network

                                                                                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                                                                                              Reconnaissance

                                                                                                                                                                              Resource Development

                                                                                                                                                                              Initial Access

                                                                                                                                                                              Execution

                                                                                                                                                                              Command and Scripting Interpreter

                                                                                                                                                                              2
                                                                                                                                                                              T1059

                                                                                                                                                                              PowerShell

                                                                                                                                                                              1
                                                                                                                                                                              T1059.001

                                                                                                                                                                              Windows Command Shell

                                                                                                                                                                              1
                                                                                                                                                                              T1059.003

                                                                                                                                                                              Persistence

                                                                                                                                                                              Boot or Logon Autostart Execution

                                                                                                                                                                              3
                                                                                                                                                                              T1547

                                                                                                                                                                              Active Setup

                                                                                                                                                                              1
                                                                                                                                                                              T1547.014

                                                                                                                                                                              Registry Run Keys / Startup Folder

                                                                                                                                                                              2
                                                                                                                                                                              T1547.001

                                                                                                                                                                              Create or Modify System Process

                                                                                                                                                                              1
                                                                                                                                                                              T1543

                                                                                                                                                                              Windows Service

                                                                                                                                                                              1
                                                                                                                                                                              T1543.003

                                                                                                                                                                              Event Triggered Execution

                                                                                                                                                                              2
                                                                                                                                                                              T1546

                                                                                                                                                                              Change Default File Association

                                                                                                                                                                              1
                                                                                                                                                                              T1546.001

                                                                                                                                                                              Component Object Model Hijacking

                                                                                                                                                                              1
                                                                                                                                                                              T1546.015

                                                                                                                                                                              Pre-OS Boot

                                                                                                                                                                              1
                                                                                                                                                                              T1542

                                                                                                                                                                              Bootkit

                                                                                                                                                                              1
                                                                                                                                                                              T1542.003

                                                                                                                                                                              Privilege Escalation

                                                                                                                                                                              Boot or Logon Autostart Execution

                                                                                                                                                                              3
                                                                                                                                                                              T1547

                                                                                                                                                                              Active Setup

                                                                                                                                                                              1
                                                                                                                                                                              T1547.014

                                                                                                                                                                              Registry Run Keys / Startup Folder

                                                                                                                                                                              2
                                                                                                                                                                              T1547.001

                                                                                                                                                                              Create or Modify System Process

                                                                                                                                                                              1
                                                                                                                                                                              T1543

                                                                                                                                                                              Windows Service

                                                                                                                                                                              1
                                                                                                                                                                              T1543.003

                                                                                                                                                                              Event Triggered Execution

                                                                                                                                                                              2
                                                                                                                                                                              T1546

                                                                                                                                                                              Change Default File Association

                                                                                                                                                                              1
                                                                                                                                                                              T1546.001

                                                                                                                                                                              Component Object Model Hijacking

                                                                                                                                                                              1
                                                                                                                                                                              T1546.015

                                                                                                                                                                              Defense Evasion

                                                                                                                                                                              Hide Artifacts

                                                                                                                                                                              1
                                                                                                                                                                              T1564

                                                                                                                                                                              Ignore Process Interrupts

                                                                                                                                                                              1
                                                                                                                                                                              T1564.011

                                                                                                                                                                              Modify Registry

                                                                                                                                                                              6
                                                                                                                                                                              T1112

                                                                                                                                                                              Pre-OS Boot

                                                                                                                                                                              1
                                                                                                                                                                              T1542

                                                                                                                                                                              Bootkit

                                                                                                                                                                              1
                                                                                                                                                                              T1542.003

                                                                                                                                                                              Subvert Trust Controls

                                                                                                                                                                              2
                                                                                                                                                                              T1553

                                                                                                                                                                              Install Root Certificate

                                                                                                                                                                              2
                                                                                                                                                                              T1553.004

                                                                                                                                                                              Credential Access

                                                                                                                                                                              Credentials from Password Stores

                                                                                                                                                                              1
                                                                                                                                                                              T1555

                                                                                                                                                                              Credentials from Web Browsers

                                                                                                                                                                              1
                                                                                                                                                                              T1555.003

                                                                                                                                                                              Unsecured Credentials

                                                                                                                                                                              1
                                                                                                                                                                              T1552

                                                                                                                                                                              Credentials In Files

                                                                                                                                                                              1
                                                                                                                                                                              T1552.001

                                                                                                                                                                              Discovery

                                                                                                                                                                              Browser Information Discovery

                                                                                                                                                                              1
                                                                                                                                                                              T1217

                                                                                                                                                                              Network Service Discovery

                                                                                                                                                                              3
                                                                                                                                                                              T1046

                                                                                                                                                                              Peripheral Device Discovery

                                                                                                                                                                              1
                                                                                                                                                                              T1120

                                                                                                                                                                              Query Registry

                                                                                                                                                                              5
                                                                                                                                                                              T1012

                                                                                                                                                                              Software Discovery

                                                                                                                                                                              1
                                                                                                                                                                              T1518

                                                                                                                                                                              Security Software Discovery

                                                                                                                                                                              1
                                                                                                                                                                              T1518.001

                                                                                                                                                                              System Information Discovery

                                                                                                                                                                              5
                                                                                                                                                                              T1082

                                                                                                                                                                              System Location Discovery

                                                                                                                                                                              1
                                                                                                                                                                              T1614

                                                                                                                                                                              System Language Discovery

                                                                                                                                                                              1
                                                                                                                                                                              T1614.001

                                                                                                                                                                              System Network Configuration Discovery

                                                                                                                                                                              1
                                                                                                                                                                              T1016

                                                                                                                                                                              Internet Connection Discovery

                                                                                                                                                                              1
                                                                                                                                                                              T1016.001

                                                                                                                                                                              System Time Discovery

                                                                                                                                                                              1
                                                                                                                                                                              T1124

                                                                                                                                                                              Lateral Movement

                                                                                                                                                                              Collection

                                                                                                                                                                              Data from Local System

                                                                                                                                                                              1
                                                                                                                                                                              T1005

                                                                                                                                                                              Command and Control

                                                                                                                                                                              Web Service

                                                                                                                                                                              1
                                                                                                                                                                              T1102

                                                                                                                                                                              Exfiltration

                                                                                                                                                                              Impact

                                                                                                                                                                              Inhibit System Recovery

                                                                                                                                                                              1
                                                                                                                                                                              T1490

                                                                                                                                                                              Replay Monitor

                                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                                              Downloads

                                                                                                                                                                              config.ini
                                                                                                                                                                              • Path C:\Program Files (x86)\360\Total Security\config.ini
                                                                                                                                                                              • Size 182B
                                                                                                                                                                              • SHA256 25f95e61da9a18c4852d3a434ea0a09f19b0359f6dce33650c2a7fb3e1f2cefe
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              i18n.ini
                                                                                                                                                                              • Path C:\Program Files (x86)\360\Total Security\i18n\i18n.ini
                                                                                                                                                                              • Size 246B
                                                                                                                                                                              • SHA256 f421332fd132d8405cad34871425c9922e4a1b172d74f86b9e4e7ee750205919
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              SecurityProductInformation.ini
                                                                                                                                                                              • Path C:\Program Files (x86)\360\Total Security\safemon\SecurityProductInformation.ini
                                                                                                                                                                              • Size 365B
                                                                                                                                                                              • SHA256 55918b758890f9d6428ff26747de79d8d3f45db6bc2ad601578bb4fd156e0f22
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              updatecfg.ini
                                                                                                                                                                              • Path C:\Program Files (x86)\360\Total Security\updatecfg.ini
                                                                                                                                                                              • Size 14KB
                                                                                                                                                                              • SHA256 817a8be68b44040e018b7cefa0ed43822a4cc672e594183fc9771895e14596db
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              20260828_002026_once_06_02_service_install_1.656.87.log
                                                                                                                                                                              • Path C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\20260828_002026_once_06_02_service_install_1.656.87.log
                                                                                                                                                                              • Size 1B
                                                                                                                                                                              • SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              brd_sdk64_clr.dll
                                                                                                                                                                              • Path C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\brd_sdk64_clr.dll
                                                                                                                                                                              • Size 8.3MB
                                                                                                                                                                              • SHA256 e32d58e6b19127fb4917cb7230f13636653d3c9c5a3b3e43b99d5d071e033943
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              brightdata.exe
                                                                                                                                                                              • Path C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\brightdata.exe
                                                                                                                                                                              • Size 1.3MB
                                                                                                                                                                              • SHA256 bd79ac0c9c20648bca0c64cf4f28a03b687f3cab1afefd2a3249271276d83059
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              conf.json
                                                                                                                                                                              • Path C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\db\conf.json
                                                                                                                                                                              • Size 214B
                                                                                                                                                                              • SHA256 acc78a9b0073b41fe1ee75f0cbc5c23d9d32a34ec18a5fe12d97747dbbc9f399
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              idle_report.exe
                                                                                                                                                                              • Path C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\idle_report.exe
                                                                                                                                                                              • Size 1.9MB
                                                                                                                                                                              • SHA256 abd9214a7c176f3dee786335f38b1dd91ae71eb26b628aa7371971ee95ea30f5
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              lum_sdk_session_id
                                                                                                                                                                              • Path C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\lum_sdk_session_id
                                                                                                                                                                              • Size 128B
                                                                                                                                                                              • SHA256 92e89a5fa902a80b50cb44636a68ad6177088bd4ead0eb43dbb242f3ba9769ab
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              lum_sdk_session_id:LUM
                                                                                                                                                                              • Path C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\lum_sdk_session_id:LUM
                                                                                                                                                                              • Size 216B
                                                                                                                                                                              • SHA256 5ca9f8041c64abb7a5921d759522630b570246462a9051fb28fbebae9b37e29e
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              msvcr120.dll
                                                                                                                                                                              • Path C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\msvcr120.dll
                                                                                                                                                                              • Size 940KB
                                                                                                                                                                              • SHA256 ad32240bb1de55c3f5fcac8789f583a17057f9d14914c538c2a7a5ad346b341c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Bright VPN.lnk
                                                                                                                                                                              • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bright VPN.lnk
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 7cbf037886a2016dd0b78fa9f033a7b39e1e7baa2794be92f575138445da2e6f
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              c42d720ff0e9f6470130a559aff91313155d3acb
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\BrightData\c42d720ff0e9f6470130a559aff91313155d3acb
                                                                                                                                                                              • Size 33B
                                                                                                                                                                              • SHA256 7b6e66e8bfc171e0483005d95aab4a0f47875364e5213d833df02019ebfc6c85
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              82743fc2c64a773debe656f3c9103b461b2d256f.ini
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\82743fc2c64a773debe656f3c9103b461b2d256f.ini
                                                                                                                                                                              • Size 446B
                                                                                                                                                                              • SHA256 44f843a66403a6ea10bff758095a22922e98a9004a6d89efcff7e513518c93d3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              adframes
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\adframes\adframes
                                                                                                                                                                              • Size 29KB
                                                                                                                                                                              • SHA256 cab6b9a78f2135e13052820044e2b0663d67018e4b27e28dca0a08cb3ee178a0
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              13fb8ad2-8019-4ae3-af20-0f22985cd640.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\common-local-storage\13fb8ad2-8019-4ae3-af20-0f22985cd640.tmp
                                                                                                                                                                              • Size 111B
                                                                                                                                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              data_0
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\common-local-storage\GPUCache\data_0
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                              Submit Download

                                                                                                                                                                              data_1
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\common-local-storage\GPUCache\data_1
                                                                                                                                                                              • Size 264KB
                                                                                                                                                                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                              Submit Download

                                                                                                                                                                              data_2
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\common-local-storage\GPUCache\data_2
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                              Submit Download

                                                                                                                                                                              data_3
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\common-local-storage\GPUCache\data_3
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                              Submit Download

                                                                                                                                                                              cookies.ini
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\cookies.ini
                                                                                                                                                                              • Size 19B
                                                                                                                                                                              • SHA256 0190c1423b560073a347568f06c9700af812844c1fe785faefd44369e5cb9975
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              log
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps\logs\log
                                                                                                                                                                              • Size 3KB
                                                                                                                                                                              • SHA256 c47c20af49363225d77857d42da18d4a7643b16560969f72a2424bd0fe68234d
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              log
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps\logs\log
                                                                                                                                                                              • Size 5KB
                                                                                                                                                                              • SHA256 2e129f16a28bcdab962081f70ff0799306dce1c2334a17acfe71e99377d9fce5
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              f316980032c3150dfce31954e0b3ea89d6456003.ini
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\f316980032c3150dfce31954e0b3ea89d6456003.ini
                                                                                                                                                                              • Size 513B
                                                                                                                                                                              • SHA256 996158a1b60b535d80b9f0f3b65b589fa4cb07ce89eed966d526d5035128d2c0
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              f316980032c3150dfce31954e0b3ea89d6456003.ini.lock
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\f316980032c3150dfce31954e0b3ea89d6456003.ini.lock
                                                                                                                                                                              • Size 61B
                                                                                                                                                                              • SHA256 7293ed84e88270713dc41d6a3eec055bdf585a7dcd68ccc5af0c071435e97500
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              history
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\history
                                                                                                                                                                              • Size 178B
                                                                                                                                                                              • SHA256 14f451e4bb80ee009492a76dab1075dd88ff729b8b8f131c06f3b708aa3b75a4
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              history
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\history
                                                                                                                                                                              • Size 27B
                                                                                                                                                                              • SHA256 503ad1af813e5f7483c72f287d5c103fe75cd71d043a66198b4202d1e2eff4a3
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              loader.7z
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\loader.7z
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 6ca110ad272317443338101d0b43d5ec0b54b0149d0c5eb9d1e94b942317c72b
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              sigpk
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\sigpk
                                                                                                                                                                              • Size 278B
                                                                                                                                                                              • SHA256 a4a7fece1aa9b490506d66e44ddccf1a5a8346cc89d86431dafe39e79f57c159
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              search_stop_word
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\suggest\search_stop_word
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 83050ae428b81f7aa7942bf2c8de75cf24e1f31756d8241fae0a917270855f83
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              204.14.17.70
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\204.14.17.70
                                                                                                                                                                              • Size 447B
                                                                                                                                                                              • SHA256 9accdd887e9d5371d88cd1525ff5fd08689ce89084e5d3fd60cd10a6c00fec69
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              bitreactor.to
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\bitreactor.to
                                                                                                                                                                              • Size 519B
                                                                                                                                                                              • SHA256 54293423ca49bc746eed25dd9110149dc55ff27ebd04096b05a87c08d8fbc436
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              elitetorrent.net
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\elitetorrent.net
                                                                                                                                                                              • Size 234B
                                                                                                                                                                              • SHA256 3fc6fd262ae1d5fa419279c390cca313ae9f6d9fce5ce00547f7f8746e86f8ca
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              fast-torrent.ru
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\fast-torrent.ru
                                                                                                                                                                              • Size 616B
                                                                                                                                                                              • SHA256 e34276c23466e6d554fea7514e9ead4938b388ad1f639df30b6af4ccda13d059
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              fastpic.ru
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\fastpic.ru
                                                                                                                                                                              • Size 578B
                                                                                                                                                                              • SHA256 5459f82e7f541b1f4296def89c18309ec257df7238432fbdf499ccea2a00e547
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              firepic.org
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\firepic.org
                                                                                                                                                                              • Size 658B
                                                                                                                                                                              • SHA256 30650a7bd0e82a2edc2fd0fa4a4e95222403ca0213a9dec7f96b3a27b6e35eb1
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              hqclub.net
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\hqclub.net
                                                                                                                                                                              • Size 420B
                                                                                                                                                                              • SHA256 8ad1e892845f1e5ae3d2fc5b9452b74fbf1e57783e4b22ff0de746e462772bcb
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              imageshack.us
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\imageshack.us
                                                                                                                                                                              • Size 482B
                                                                                                                                                                              • SHA256 c46f3a888af7e828299627458ef03115bea4aa440ee5efa308e97a77ea29c26c
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              kastatic.com
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\kastatic.com
                                                                                                                                                                              • Size 421B
                                                                                                                                                                              • SHA256 b6797e27a729efa75726a9186d7435a652d98787471359c63c929d206950ff4b
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              kat.ph
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\kat.ph
                                                                                                                                                                              • Size 401B
                                                                                                                                                                              • SHA256 f4c233d10a0bff28f41bfb2d6259b64c8dbba930902ae4feeea5d2e8b2917469
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              kickass.to
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\kickass.to
                                                                                                                                                                              • Size 413B
                                                                                                                                                                              • SHA256 3fecae7965a0300b754b22c11104270bdc46df580d0c1ee7e7da4af56faaaccb
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              kickasstorrents.com
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\kickasstorrents.com
                                                                                                                                                                              • Size 442B
                                                                                                                                                                              • SHA256 e5cf2f96fa493faba9b6f1adcd79f67bb38ef4ea468046ebd3c75c386529eb16
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              leetleech.org
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\leetleech.org
                                                                                                                                                                              • Size 456B
                                                                                                                                                                              • SHA256 9f48bd6f5f5b9931669eee4cbd5aa37675ba1a8df70361915424a38c95cef0ff
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              lostpic.net
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\lostpic.net
                                                                                                                                                                              • Size 642B
                                                                                                                                                                              • SHA256 b8fc74840501a81036f51ef2780940692de8c90e6d2461eb89da6ed3abb08961
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              mgshare.com
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\mgshare.com
                                                                                                                                                                              • Size 379B
                                                                                                                                                                              • SHA256 5817dabcd4d41012338308bb335bfe35e8fb63d65840d7f302ccdae09a012e50
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              nil
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\nil
                                                                                                                                                                              • Size 174B
                                                                                                                                                                              • SHA256 31f1050379a12388b16031be3fa1a1be5aab0994073b450a13f4d6d97c0b825e
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              opentracker.pw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\opentracker.pw
                                                                                                                                                                              • Size 394B
                                                                                                                                                                              • SHA256 0554dd6ced262758c6ffb06c370fd804f3f43d11dd323cea134fd3d01fdc287d
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              pictat.com
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\pictat.com
                                                                                                                                                                              • Size 467B
                                                                                                                                                                              • SHA256 a02917e025c81094e2d271cd402015f5f2dc9c6f1a08e09dad3fcf32125030a3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              radikal.ru
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\radikal.ru
                                                                                                                                                                              • Size 586B
                                                                                                                                                                              • SHA256 e224489706bcea4b2b91133fe48310f7be920013cbbe0eb1292c7146bccac0c1
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              rudb.org
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\rudb.org
                                                                                                                                                                              • Size 453B
                                                                                                                                                                              • SHA256 aea8f0b4c5e5932d4024b5b5b48d364b5c6cb6f3f15da0307bcf25e40e18834c
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              turbopic.org
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\turbopic.org
                                                                                                                                                                              • Size 220B
                                                                                                                                                                              • SHA256 1d97e3d403445dfad973f2bdcce8fef8d5c3b83e2b3522e1793eed1d5dce4d7d
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              youpicture.org
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\youpicture.org
                                                                                                                                                                              • Size 611B
                                                                                                                                                                              • SHA256 84d7f005c9bae5395e2a05d6eb85251e4583a0eed15cbace853c223525b67c47
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              1337x.to
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\1337x.to
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 e757e8929a5f26bc21e2d676a2b71ac9d6f138d53d294c0d255c83d71a162fa0
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              elitetorrent.net
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\elitetorrent.net
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 df1d0974a7c594e75928d9ba1d83b5620c311baa67367f16400bb0883a04397e
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              extratorrent.cc
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\extratorrent.cc
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 5b5bac1e3ef42d350e6785e33bc18daf9dfe1c02a6389793d7147539b6ddc13e
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              fast-torrent.ru
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\fast-torrent.ru
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 e2978293661666b6ac7a794c9048b2ce0767764c6c8e13324ba049c029c7a818
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              maintracker.org
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\maintracker.org
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 ef6bb8c24b4215f420504023a2666ac3a419cd84dc50202449ad78e6ef091188
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              mediaget
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\mediaget
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 1d32adc78d3c334890409d7694509b12bb957c42fca74fca4df9a3c350d75b2b
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              mediaget-dht
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\mediaget-dht
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 9c75d017c83e545aceb4b9fcf07a2c7e963479ab3f0f37380575f54e6ad0c804
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              mediaget.fast-torrent
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\mediaget.fast-torrent
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 4fb984b0a39e0f489f6384bb7bd2eb92cf642a5108e1f5bfc00899cf0bca0883
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              mediaget.rutor
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\mediaget.rutor
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 b585d4fba57d0588af19ef562ff665a08a88f67671e9b77a58d4b7eacb66106c
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              new-rutor.org
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\new-rutor.org
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 a3634c82c648f7d9e79d9b9cc0ae21d0ee1d559aa5fe151e9705d3464b2d14e1
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              opentracker.pw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\opentracker.pw
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 9cf2ebd02c36a576e176dcf3e757efdfe81a5e9f01da4d814dc0b4cf7983d216
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              rarbg.to
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\rarbg.to
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 b15c6edb77efe557cd63e9870f7a67bc423ea1a84c47e1fc1cfa3163e821b261
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              rutor.info
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\rutor.info
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 5baf1c0dd207da1893feb42c4744b99255deeb514b35f6b1f1cb853aff55a297
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              rutracker.org
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\rutracker.org
                                                                                                                                                                              • Size 7KB
                                                                                                                                                                              • SHA256 63a7c50ccc066508f39e1796c1d4db1916b17989712b96fab3706421f3ff000f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              tfile.co
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\tfile.co
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 03ce16919821895faff817af226a8a23c1d8581493bc8629d51322fab332601e
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              thepiratebay10.org
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\thepiratebay10.org
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 575cbff32b05df43f653068bff2d18277bb64fc909426c35ace0732ae86c7d3a
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              torrentproject.se
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\torrentproject.se
                                                                                                                                                                              • Size 929B
                                                                                                                                                                              • SHA256 5980675c71b81dd8bfafc152e59a076adb6c03963e6fd658c32291a1f0e7cad9
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              yourbittorrent.com
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\yourbittorrent.com
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 5d9a8042d3a06ce69b350398c622686464d82daea72b2bc18f2381fe89610859
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              stop_words_urls
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\stopwords\stop_words_urls
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 be8a20c87c67f9206312cbcf9386c6f0f47cfa0ced5ff91d52496f7385a42776
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              bittorrent_trackers
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\trackers\bittorrent_trackers
                                                                                                                                                                              • Size 544B
                                                                                                                                                                              • SHA256 1cf623ac2a9ef766fe328f4b8ffc7f6b03b602cd52d249fadb657828f141bb2c
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              0c7f5705-19a8-46fb-8ab4-780e943e75ff.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\0c7f5705-19a8-46fb-8ab4-780e943e75ff.tmp
                                                                                                                                                                              • Size 61B
                                                                                                                                                                              • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              3a3d1e49-41c2-4d4b-ac66-54d7939e49b2.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\3a3d1e49-41c2-4d4b-ac66-54d7939e49b2.tmp
                                                                                                                                                                              • Size 500B
                                                                                                                                                                              • SHA256 2e0c8998900682fa85ad686dd08129956cc99b9243648b086b277cb1e5e768da
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              3ea7a714-bae7-494b-8fe8-f58c356a6ce3.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\3ea7a714-bae7-494b-8fe8-f58c356a6ce3.tmp
                                                                                                                                                                              • Size 833B
                                                                                                                                                                              • SHA256 e650dc3813b1b9033776a85500a0f42150467f83ca7506344968f907ac3b3525
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              5db87c4f-39a9-43b3-a115-53457d66cfc6.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\5db87c4f-39a9-43b3-a115-53457d66cfc6.tmp
                                                                                                                                                                              • Size 835B
                                                                                                                                                                              • SHA256 db8f8fd9f0224bd6d60c68dc907f83ea964fcb692887f096ce8337049643c337
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              8aca2a00-5a70-423f-814d-e068249cb2d7.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\8aca2a00-5a70-423f-814d-e068249cb2d7.tmp
                                                                                                                                                                              • Size 718B
                                                                                                                                                                              • SHA256 050c4a82ffdad3e349e1b37d0fe3ff988f321de364924d671b63137a4c545a47
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              MANIFEST-000001
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\IndexedDB\https_mediaget.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                              • Size 23B
                                                                                                                                                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Network Persistent State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\Network Persistent State
                                                                                                                                                                              • Size 84B
                                                                                                                                                                              • SHA256 712196693e3527ac1131831f1a2108b6c0e5c68967b26d51a452611cdfb86e0c
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              TransportSecurity~RFe5ce3a1.TMP
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\TransportSecurity~RFe5ce3a1.TMP
                                                                                                                                                                              • Size 212B
                                                                                                                                                                              • SHA256 bf8e80262e0543442eec08d111d93d924ac475c3372f55452a7b9cc43f2c47e3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              a737a62d-8f32-47eb-9a26-4ad419da3c8c.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\a737a62d-8f32-47eb-9a26-4ad419da3c8c.tmp
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 5c6bac60badc9169b8cc5e5790a9e51eaab0e7880f2ca49854ea4ef7cfe5d7af
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              a8e5815b-5daf-4b21-9be9-d74cf3a5412f.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\a8e5815b-5daf-4b21-9be9-d74cf3a5412f.tmp
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 6f60200c0e5567e0e14a04c9ca1bc434201b48d57ef78f1ba1ae2e541d29330a
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              be0bd0fb-0cb2-4e6c-b774-5a9a77cfe893.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\be0bd0fb-0cb2-4e6c-b774-5a9a77cfe893.tmp
                                                                                                                                                                              • Size 835B
                                                                                                                                                                              • SHA256 1534bcd50ee7e0cc242ca707b44a2678ba718f1eb6091404ef32d443136c7f14
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              f7cb6883-feeb-49f2-915c-0a2e563c63f8.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\f7cb6883-feeb-49f2-915c-0a2e563c63f8.tmp
                                                                                                                                                                              • Size 835B
                                                                                                                                                                              • SHA256 2b0547978b44e49823a2b0ffabecbd770f99279e7b4fb70d31a8980fc332c5e3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              fea10ad0-681e-4ec7-82db-be0998db593d.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\fea10ad0-681e-4ec7-82db-be0998db593d.tmp
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 13033dbe04e90026466c7e1270b9614eb501c685d0a9369e05f75b040ece9455
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              0013c5e8-c9ce-4edb-8630-d760ecd66323.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webmenu-local-storage\0013c5e8-c9ce-4edb-8630-d760ecd66323.tmp
                                                                                                                                                                              • Size 624B
                                                                                                                                                                              • SHA256 f37009277ef08191402bc4f04ae07c6a813e5683ce9647fcbe97267bfd70bd9a
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              31ed1065-f275-4c69-bf14-2c9218b810fb.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webmenu-local-storage\31ed1065-f275-4c69-bf14-2c9218b810fb.tmp
                                                                                                                                                                              • Size 418B
                                                                                                                                                                              • SHA256 bcf27c4086b6549240d963bb3863d72610ac0e42862a9e5d222a40d93338433a
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Network Persistent State~RFe5dcd45.TMP
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webmenu-local-storage\Network Persistent State~RFe5dcd45.TMP
                                                                                                                                                                              • Size 59B
                                                                                                                                                                              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              TransportSecurity~RFe5d4cfa.TMP
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webmenu-local-storage\TransportSecurity~RFe5d4cfa.TMP
                                                                                                                                                                              • Size 624B
                                                                                                                                                                              • SHA256 be11bfbfe64c75cca0887ce7e58be1846d78be79b5ee6beda862d2114935b084
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              settings.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                              • Size 280B
                                                                                                                                                                              • SHA256 c06092c74e14f9aedcdf76488e190f7cf1e914b1564789503d17b2bc6c37f048
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              settings.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                              • Size 280B
                                                                                                                                                                              • SHA256 c2e43b1b2204c39040da8bd3bc9491c15dd00917b19c3177f24d68321c02acbe
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              settings.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                              • Size 280B
                                                                                                                                                                              • SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              settings.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                              • Size 280B
                                                                                                                                                                              • SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              LOG.old
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                              • Size 331B
                                                                                                                                                                              • SHA256 e9172d78657a2acf671ca34e2a0f5799c82e94c90d27afb5e299a304ce449a4f
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              BookmarkMergedSurfaceOrdering
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                              • Size 6B
                                                                                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              f_00003c
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003c
                                                                                                                                                                              • Size 49KB
                                                                                                                                                                              • SHA256 5b50e48d094c8b1eaa96b7aafc2a7746406c38831cd5f1358fff2f1632b2c834
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              the-real-index
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 4a2779383f3c5de21cb9f9af344e66b1e3d6bd7659d9a93f8b5cf4a51a35be8e
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              the-real-index
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                              • Size 4KB
                                                                                                                                                                              • SHA256 6034a19a091f9ffd6e11319e6863355a40864b401e0a976b4ff3a4736464910b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              SiteList-Enterprise.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                              • Size 2B
                                                                                                                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Edge Profile.ico
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                              • Size 70KB
                                                                                                                                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Network Persistent State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 f2107a9a906e96c71dcf0062aad6e6e6890449f7589e6289562d00cfae8a66b5
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Network Persistent State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 e08b1ec2f1c7e5d98ee75d96afb70370af25225205ccb4c3a1ff1c768fdf5eb8
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Network Persistent State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 bc9329d6da12fd51b00acad7ac5aacb3dca9753100a1b3d35e6b709e156b7ba7
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Network Persistent State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 b992b0c2f489a5bf28b9d5e0eb42016243990fad714c35c43ee9b0cffe2f71fe
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              SCT Auditing Pending Reports
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                              • Size 2B
                                                                                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Sdch Dictionaries
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                              • Size 40B
                                                                                                                                                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                              • Size 12KB
                                                                                                                                                                              • SHA256 80e923c9cf21a24649dcc4d049f11080d3392a1cec4128814745b0a992b5faa4
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                              • Size 14KB
                                                                                                                                                                              • SHA256 6a0c47d0c57bd252b61a233fbbbdd98bbf60cedb8d236990540b5f909f12e787
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                              • Size 29KB
                                                                                                                                                                              • SHA256 91e75814176b445136ed31971b1ddeb116bc399606a24949b86833349361e868
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                              • Size 29KB
                                                                                                                                                                              • SHA256 3014de737bff1b0b66f40256de712ad4104c761cc1b6b156254b490e5bb20bfd
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                              • Size 28KB
                                                                                                                                                                              • SHA256 37805935efd13436136a1e3eac1e4e10ae4cffb2a34d6b04db3eabc9eed4bc20
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                              • Size 12KB
                                                                                                                                                                              • SHA256 5e254bb6e28f39815110588eaf2d29541c8934810012065d1a39a0769e8d2b68
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                              • Size 12KB
                                                                                                                                                                              • SHA256 e631aa59d64d0b724e1e130d0bce18cb96275308ec69d4d867904e941acd22de
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                              • Size 14KB
                                                                                                                                                                              • SHA256 f343a2972905146458da27d3981e8c73c2e42ea37e32241c2aa6889ec85832aa
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Secure Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                              • Size 23KB
                                                                                                                                                                              • SHA256 1cde50365a8c1204ccc9d7c92d57fb5e70ff2422c917664464bf02fd9b258832
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              index.txt
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                              • Size 370B
                                                                                                                                                                              • SHA256 2c7644626b9742ea8b5aff4b55f686a16684eb040f06832abd7bb678e54a7fdb
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              the-real-index
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                              • Size 72B
                                                                                                                                                                              • SHA256 bfc3a715812a7ba304774735073d5ac8c2edafe54f32ff83b6a9efc1ada7b75d
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              the-real-index~RFe5b246d.TMP
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b246d.TMP
                                                                                                                                                                              • Size 48B
                                                                                                                                                                              • SHA256 c9931fb7c5ff729a4d6ce4b4aaf440036bf5a1312b0611bea6377ce242c4744e
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              sync_diagnostic.log
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                              • Size 4KB
                                                                                                                                                                              • SHA256 82c4a44ac47ec7e9a4683ae047c6f38280e659a09936a9e13166ac36863e9458
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              CURRENT
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                                                                                                                              • Size 16B
                                                                                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              MANIFEST-000001
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                                                                                                                              • Size 41B
                                                                                                                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              the-real-index
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\8895b9b1-fcd1-4c96-a50a-270ba9568b1a\index-dir\the-real-index
                                                                                                                                                                              • Size 72B
                                                                                                                                                                              • SHA256 f37b735e58fb4124f931902124a8bf8730093ed6e3f10f872430ef56380d4ee3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              the-real-index~RFe5b74fe.TMP
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\8895b9b1-fcd1-4c96-a50a-270ba9568b1a\index-dir\the-real-index~RFe5b74fe.TMP
                                                                                                                                                                              • Size 48B
                                                                                                                                                                              • SHA256 87cfbe703d084cfa70bc9e8104b7c1c8eea22b4ff513827e5fbf6371b263a39e
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              index.txt
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
                                                                                                                                                                              • Size 170B
                                                                                                                                                                              • SHA256 0b8657c1674d72255fae0c4ae63ede2b146bf69185cb577c7c170e66a702f513
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              index.txt
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
                                                                                                                                                                              • Size 254B
                                                                                                                                                                              • SHA256 c3d8c7ea39fc15e9bdc07bc009adccba8b20e071b90ba5bb66ef6c114d8e3bb2
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              index.txt
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
                                                                                                                                                                              • Size 171B
                                                                                                                                                                              • SHA256 1ffc042116cd3ccef82e3978d3bb4f7c8dcbd6903de1b4b65d6e88b95226d524
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              index.txt~RFe5b12f8.TMP
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5b12f8.TMP
                                                                                                                                                                              • Size 177B
                                                                                                                                                                              • SHA256 275313f5783691ded255fa7e06596efc9a0cab4209385029741ab50be3ef317e
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              c597d23e-a3f0-4742-972a-05346c99ffa0.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c597d23e-a3f0-4742-972a-05346c99ffa0.tmp
                                                                                                                                                                              • Size 414B
                                                                                                                                                                              • SHA256 16e7e6b1b614838909660bdcb8ece64f9852c8ead8d5e9a7d90be286ed0b8700
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              a767016e-dd5d-4ad9-a620-e9b4facfc6c4.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a767016e-dd5d-4ad9-a620-e9b4facfc6c4.tmp
                                                                                                                                                                              • Size 22KB
                                                                                                                                                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 39KB
                                                                                                                                                                              • SHA256 8c428f77a18180652869abd0bef3ea2f8261fad1456108178845af298dae1137
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 38KB
                                                                                                                                                                              • SHA256 bca33a4919b7f1d1df002d6511bbac5a390bb41e6e1e413f8c311bc913b4c7e2
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 33KB
                                                                                                                                                                              • SHA256 ea73dce33ab561201e415c48377106a07f086acaf35a06cb837b378ccce47917
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 42KB
                                                                                                                                                                              • SHA256 d16c6d60e004a9fe175dae67776c7da09c1546f1802daaeb30473dacf61dcd8c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 33KB
                                                                                                                                                                              • SHA256 7ef7887fe68543b1da712561ac351b5dd9361756bc3056e07e6830a5a3f631bf
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 41KB
                                                                                                                                                                              • SHA256 1fa26b8a7b350213b991b1b364578b13c189ffa9efbbd996ddd0f8cb58497abf
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 41KB
                                                                                                                                                                              • SHA256 a7ba9dd3252705c97e0865ebd591f41340da7ab32b096d13bd97b718e81380eb
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 41KB
                                                                                                                                                                              • SHA256 d0738d3482799678b80dd752fc9095fb7052bb50e0fe434fbfbc1e00e2a0516b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 41KB
                                                                                                                                                                              • SHA256 1ddb50e1cadc847507e489fc4183c7fa587f21fbfd59850f286a02cd6fa81c5e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 41KB
                                                                                                                                                                              • SHA256 5359f7fbfecec24df076acd3fabb39b1dbc5a7d9dc0ab51eee95bdc75aca9398
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 41KB
                                                                                                                                                                              • SHA256 ad5d508e2e0a233411ca2ba1ed020de2fef881a15d8f2107ebdb4a1c887f8624
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                              • Size 38KB
                                                                                                                                                                              • SHA256 66ec74482d88ea5bfa699ac23accedd5968c6c6195671a4844e6b918f5e50467
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              RevisitationBloomfilter
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                              • Size 392B
                                                                                                                                                                              • SHA256 1c857317e6f36b99eef72d1cae6dbc942f80dd37c5b95b4ba4886ea1efde7fc2
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              RevisitationBloomfilter
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                              • Size 392B
                                                                                                                                                                              • SHA256 af1bd4b95c834b1d12b1de1726567089087df6c092839e11914ee2d92eeb7f72
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              RevisitationBloomfilter~RFe5b3d34.TMP
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5b3d34.TMP
                                                                                                                                                                              • Size 392B
                                                                                                                                                                              • SHA256 91a7a812fbad8024c6db7bcfc876b5a705427ee1be047c8b0d813b61bf36e478
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              85a68723-0e46-4080-b4d2-3f34a28a0cda.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\85a68723-0e46-4080-b4d2-3f34a28a0cda.tmp
                                                                                                                                                                              • Size 13B
                                                                                                                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              StartupProfileData-NonInteractive
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 124123e5f5deae1f5deaafc9edc8aa4c1d2bcdc2be10edcdfda2910ed68bc489
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              StartupProfileData-NonInteractive
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 a26d0ed182104b9933e30f789489495b03165243879c8212d19bdfd008f1935b
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              StartupProfileData-NonInteractive
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 648c23e4801ef113468baded8b68fb225d0cf3e554adc339e3d5393b9b0a71a5
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              installer_prefs.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 903204e21e24e93e2dee22577609f7c3af949f11f1072c91bdf56d26dcbbc781
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              installer_prefs.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 10047ad80bebaa8b5863b84bf47614b23e86715087ec104a98ba630585cc4619
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              [email protected]
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\[email protected]
                                                                                                                                                                              • Size 655B
                                                                                                                                                                              • SHA256 1a49a40421afdc4f54e6f3bdf547842a6ee5b611227e338f9331bc048c8318af
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              setup.ini
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\[email protected]\setup.ini
                                                                                                                                                                              • Size 830B
                                                                                                                                                                              • SHA256 c0da9994cb4b069483eb8c1a63ada13978426e4b9eabe6a6c21c835efed21224
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Opera Browser.lnk
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181\Opera Browser.lnk
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 89eb0c0c5fdf13ddce0b1b5c980fdac8602700c76b025e9ba57aba62e0c71b98
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              additional_file0.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181\additional_file0.tmp
                                                                                                                                                                              • Size 2.8MB
                                                                                                                                                                              • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              installer_prefs_include.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181\installer_prefs_include.json
                                                                                                                                                                              • Size 325B
                                                                                                                                                                              • SHA256 87a30dd3a44f1ce76d51fd49bb7a0234b97d9f7aa0abd2e0514e57ba509d19e3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              installer_prefs_include.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181\installer_prefs_include.json
                                                                                                                                                                              • Size 310B
                                                                                                                                                                              • SHA256 d67dfc638bb6b67f5a24a407c9ce85590af7ab1971d13852fdacac47116945c4
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              installer_prefs_include.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\654dd75d-720f-4dfe-bef7-ff9377d8366c Opera Installer Temp\opera_package_202608280118181\installer_prefs_include.json
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 778ecc4417e31588ab8f84ff71cee54dd49bf5afc0f808bcc34a5ec546b3a59a
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              0ea971d2-91d8-446d-81e7-995e6d4d068e.tmp.ico
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\0ea971d2-91d8-446d-81e7-995e6d4d068e.tmp.ico
                                                                                                                                                                              • Size 278KB
                                                                                                                                                                              • SHA256 ceaf13ece3ee39f31a454f3d397a4b5f5d256c9a537a3cda4aa8af2a795c8b03
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              15c7457a-2c5b-4dd2-889e-515e6551b0f0.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\15c7457a-2c5b-4dd2-889e-515e6551b0f0.tmp
                                                                                                                                                                              • Size 1B
                                                                                                                                                                              • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360base.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\1787876373_00000000_base\360base.dll
                                                                                                                                                                              • Size 1.0MB
                                                                                                                                                                              • SHA256 58f13d919f44d194827b609b6b267246abc47134bb202472c0dfe033b9d7ed73
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360Base64.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\360Base64.dll
                                                                                                                                                                              • Size 1.2MB
                                                                                                                                                                              • SHA256 80765adb886050b0f87e30fa62336985db67c09b25f4d1760194a28ff78899d7
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360DeskAna.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\360DeskAna.exe
                                                                                                                                                                              • Size 223KB
                                                                                                                                                                              • SHA256 f78eee64134aa2fca1d6eecaa8ad2c3bf9e54c232554525ac4783768daa677e1
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360DeskAna64.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\360DeskAna64.exe
                                                                                                                                                                              • Size 217KB
                                                                                                                                                                              • SHA256 48b9596b3c7b1af2c0c5cd62a815f7e43deac03ae3e91da26e8dec2891c915be
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360NetBase.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\360NetBase.dll
                                                                                                                                                                              • Size 1.5MB
                                                                                                                                                                              • SHA256 109b4add80e1cb1dfd0ab865ce2866faf1041ca63233bbc28facf1ecda8e7f23
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360NetBase64.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\360NetBase64.dll
                                                                                                                                                                              • Size 2.5MB
                                                                                                                                                                              • SHA256 141dd028fe317f2d18e4ca58d767ad1eda6dd81170127d3ac1e3aabed8072d97
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360TSCommon.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\360TSCommon.dll
                                                                                                                                                                              • Size 560KB
                                                                                                                                                                              • SHA256 b4b5cc76d7f55a735c85e7a2b2e410d1f8f396e093b5db7f233db36a5c8bf31a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360TSCommon64.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\360TSCommon64.dll
                                                                                                                                                                              • Size 687KB
                                                                                                                                                                              • SHA256 9411223780006f5d79f53e7f5b7a4ba4380e7aaf730c3e99689aab6e14cc9437
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360Util.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\360Util.dll
                                                                                                                                                                              • Size 692KB
                                                                                                                                                                              • SHA256 a0f10afbc59b83886e29310e3c2302b34a83bc83b29c76791907be4417a32ae2
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360Util64.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\360Util64.dll
                                                                                                                                                                              • Size 864KB
                                                                                                                                                                              • SHA256 4b3743a6523f5ac849af013e06655bd06e77454e24f2729d017bd664636a77b8
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              CrashReport.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\CrashReport.dll
                                                                                                                                                                              • Size 170KB
                                                                                                                                                                              • SHA256 07ed1d3443e7f9b2531aaa0b957a298ea6c5c81bcd321e7faf25a17a85063169
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              CrashReport64.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\CrashReport64.dll
                                                                                                                                                                              • Size 199KB
                                                                                                                                                                              • SHA256 09eafeda04f79fd1faf273efe104e877b719fb31689838aa12a3e6d3384a3da4
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              DumpUper.ini
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\DumpUper.ini
                                                                                                                                                                              • Size 255B
                                                                                                                                                                              • SHA256 4e3cf28ef3ce5b806c632f99482560a5246de9f86aafb7a47cdc78e5b4b019a5
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Dumpuper.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\Dumpuper.exe
                                                                                                                                                                              • Size 1.4MB
                                                                                                                                                                              • SHA256 5f21575642ecf7d38be30aef50be623f74dc3644603e0cb48d1b297ae2066614
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              MenuEx.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\MenuEx.dll
                                                                                                                                                                              • Size 315KB
                                                                                                                                                                              • SHA256 d14d7de52c5749549a17e7614bd3df8278e8595ffca4110e6289c56a21eea6dc
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              MenuEx64.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\MenuEx64.dll
                                                                                                                                                                              • Size 388KB
                                                                                                                                                                              • SHA256 11294e063fe9a5d5b6019a39b48bebb75f536e27ff92008c85e9357c95805b80
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Sites64.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\Sites64.dll
                                                                                                                                                                              • Size 2.1MB
                                                                                                                                                                              • SHA256 3d3da3b68ae798c17dce86bd245283627689e6f6e975647472e9e0a399455152
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360desktoplite_config.xml
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\Utils\DesktopPlus\360desktoplite_config.xml
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 e4bc20cb89a35695f6a154adf9f2da9b9e6e548c49dd08cbc858995235f2503b
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              DesktopPlus.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\Utils\DesktopPlus\DesktopPlus.exe
                                                                                                                                                                              • Size 3.0MB
                                                                                                                                                                              • SHA256 b48d941178a82c3738f8365254123f4a95ad8794bfcab17d91961616795617b9
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              DesktopPlus64.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\Utils\DesktopPlus\DesktopPlus64.exe
                                                                                                                                                                              • Size 3.7MB
                                                                                                                                                                              • SHA256 6af68447c5373307af410bd15975126f76dc40fc9815efbb0843b99a38b75baa
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360ScreenCapture.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\Utils\DesktopPlus\Utils\360ScreenCapture.exe
                                                                                                                                                                              • Size 668KB
                                                                                                                                                                              • SHA256 234184ee1c37f28ef75a950501e91d6b55c829f66b96696a1a8e83a09bdbe883
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360searchlite.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\Utils\DesktopPlus\Utils\360searchlite.exe
                                                                                                                                                                              • Size 915KB
                                                                                                                                                                              • SHA256 81399a7379aebbbfbce8d8cbc2d482ca04c38ddc91919ae5c6ee3a0f8fb3ea9b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              search_file_type.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\Utils\DesktopPlus\Utils\search_file_type.json
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 d1b7bc9a125cf0ffc0996bdedec5e1fa724212fab340103ceb5bc1be3c25e686
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              bell.wav
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\Utils\DesktopPlus\bell.wav
                                                                                                                                                                              • Size 156KB
                                                                                                                                                                              • SHA256 effc1ca8846a39001e410b2d8351b76be093342d139b332aa6260db01ac820d3
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              SysSweeper.ui.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\config\lang\de\SysSweeper.ui.dat
                                                                                                                                                                              • Size 102KB
                                                                                                                                                                              • SHA256 794331c530f22c2390dd44d18e449c39bb7246868b07bdf4ff0be65732718b13
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360searchlite_theme.ui
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\config\newui\themes\default\360searchlite\360searchlite_theme.ui
                                                                                                                                                                              • Size 146KB
                                                                                                                                                                              • SHA256 d83d1bf6aa9a21b4c57973548450b3b2da43bdbcb2e1af04e3aeabdf9d3f5f92
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360searchlite_theme.xml
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\config\newui\themes\default\360searchlite_theme.xml
                                                                                                                                                                              • Size 24KB
                                                                                                                                                                              • SHA256 8e5583274cbaca5d557bd095cf739a5b5f8786337a575d5c1d5df67545befacc
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              DesktopPlus_theme.ui
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\config\newui\themes\default\DesktopPlus\DesktopPlus_theme.ui
                                                                                                                                                                              • Size 2.6MB
                                                                                                                                                                              • SHA256 073e7f18c004460bddf066d6a14fd53321893356c3873680cc9cf35aa191ade5
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              default_theme.ui
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\config\newui\themes\default\default_theme.ui
                                                                                                                                                                              • Size 1.2MB
                                                                                                                                                                              • SHA256 f0cdf49da353e99c69308cc654dcfbf2d9ca6090dbb97c58664be9ea26efb485
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              desktopplus_theme.xml
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\config\newui\themes\default\desktopplus_theme.xml
                                                                                                                                                                              • Size 73KB
                                                                                                                                                                              • SHA256 0940f591cb25b4d8da7bb0651e66ea8ddc52810041bc91dd2da5723fc4367f38
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              theme.xml
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\config\newui\themes\default\theme.xml
                                                                                                                                                                              • Size 275KB
                                                                                                                                                                              • SHA256 ba6f5a1ac81fe49c14902481eb2640103abbf914efba2bc41fcd70d7b9477998
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360FsFlt.sys
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\deepscan\360FsFlt.sys
                                                                                                                                                                              • Size 563KB
                                                                                                                                                                              • SHA256 1c738be5e36be196c23c0d092ed1dd2e81b00158475e0f361105e0cdc9726d0c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              BAPIDRV.sys
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\deepscan\BAPIDRV.sys
                                                                                                                                                                              • Size 193KB
                                                                                                                                                                              • SHA256 2d7fa3af97a50240dec7540e4171772912d1dbb82259ac4acf039818417cde5d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              qutmdrv.sys
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\deepscan\qutmdrv.sys
                                                                                                                                                                              • Size 404KB
                                                                                                                                                                              • SHA256 13c357d31eb6dd253e625c0ac1e94714260b75cf7a141408750b7e0124e94f23
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360AvFlt.sys
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\filemon\360AvFlt.sys
                                                                                                                                                                              • Size 83KB
                                                                                                                                                                              • SHA256 79eb282821aa728f0fdfdb07a1fba273af83768614e026bc8e371655e398bd50
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360avflt64.sys
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\filemon\360avflt64.sys
                                                                                                                                                                              • Size 98KB
                                                                                                                                                                              • SHA256 4fb3cfbf91bc27e867d8f58081ffd3be361481e2270627825cdfd13eef50ec1d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              AntiAdwa.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\AntiAdwa.dll.locale
                                                                                                                                                                              • Size 126KB
                                                                                                                                                                              • SHA256 309d475fcbe0c3c24bfe3d22b4b3c41b1022ddb4eb8fe6e1ea38671f83573e70
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Dumpuper.exe.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\Dumpuper.exe.locale
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 87c1dc55f5cd035c6d880d14158e0dbcd193d69cc331001ec456b5b8dfc1753f
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              LibSDI.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\LibSDI.dat
                                                                                                                                                                              • Size 113KB
                                                                                                                                                                              • SHA256 f511a0eea52cb982c60ec2a8758007a8d83f8a36bb4b23b27e320cd9441862f2
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              dsconz.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\deepscan\dsconz.dat
                                                                                                                                                                              • Size 18KB
                                                                                                                                                                              • SHA256 7bdae07465d701ab2ae76fffcfcc56fb0836bdefddc7efa51011d548065245e5
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              appd.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\ipc\appd.dll.locale
                                                                                                                                                                              • Size 19KB
                                                                                                                                                                              • SHA256 cde2a0834cb8b6e4fabda07f611567a392b2e4dc23f2fc7921f8b13e774da940
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              filemgr.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\ipc\filemgr.dll.locale
                                                                                                                                                                              • Size 18KB
                                                                                                                                                                              • SHA256 3ebfed2b2a10b33af330aff197905437ef3970e8c944b7970c097ac0cbb99671
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              yhregd.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\ipc\yhregd.dll.locale
                                                                                                                                                                              • Size 16KB
                                                                                                                                                                              • SHA256 285b8717038589756ed43bbefec8d010fdfda1b9726606332c1e3601cf6e43ff
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              libaw.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\libaw.dat
                                                                                                                                                                              • Size 1.0MB
                                                                                                                                                                              • SHA256 3d1b69b19a8510d6176ceb011b71d79859c13d4c61541ec7174f344d3a77bb24
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              libvi.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\libvi.dat
                                                                                                                                                                              • Size 790KB
                                                                                                                                                                              • SHA256 e00a185464266fdd988edb2f4bd130b4ebdce7e064fedb45806f577f1bb19291
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              pic_01.jpg
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
                                                                                                                                                                              • Size 109KB
                                                                                                                                                                              • SHA256 a66eb91ed6129682ad3b3a57f10a8abf45000062038abca73a78db34c6d66cae
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              UDiskScanEngine.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\safemon\UDiskScanEngine.dll.locale
                                                                                                                                                                              • Size 17KB
                                                                                                                                                                              • SHA256 649ca00ba71a5f725ce94baaa4996a8c202103b1821a3529e84c20a8d882d35f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              udisk.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\safemon\udisk.locale
                                                                                                                                                                              • Size 444B
                                                                                                                                                                              • SHA256 254161d567ed1ae96756809932715790f4bcc5851eba123bfa6942b2b2d1eb1f
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              wd.ini
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\safemon\wd.ini
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 b0a2dd51d75609b452a16fb26138fb95545212eb6efa274f2751eb74ccc5633f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              wdk.ini
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\en\safemon\wdk.ini
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 a7883c05518f9d1d2af9773f19f470b25ea94a865fb4d43b9e16518c3434424b
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              dsurls.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\es\deepscan\dsurls.dat
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 b0355da8317155646eba806991c248185cb830fe5817562c50af71d297f269ee
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360ipc.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\es\ipc\360ipc.dat
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 0ba4355035fb69665598886cb35359ab4b07260032ba6651a9c1fcea2285726d
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360netd.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\es\ipc\360netd.dat
                                                                                                                                                                              • Size 43KB
                                                                                                                                                                              • SHA256 3b5837689b4339077ed90cfeb937d3765dda9bc8a6371d25c640dfcee296090a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360netr.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\es\ipc\360netr.dat
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 912102c07fcabe6d8a018de20b2ad97ea5f775dcb383cd3376168b7ebf8f9238
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              libdefa.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\es\libdefa.dat
                                                                                                                                                                              • Size 319KB
                                                                                                                                                                              • SHA256 19fa3cbec353223c9e376b7e06f050cc27b3c12d255fdcb5c36342fa3febbec4
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              drvmon.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\es\safemon\drvmon.dat
                                                                                                                                                                              • Size 5KB
                                                                                                                                                                              • SHA256 5ee31b5ada283f63ac19f79b3c3efc9f9e351182fcabf47ffccdd96060bfa2cf
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              art.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\fr\deepscan\art.dat
                                                                                                                                                                              • Size 38KB
                                                                                                                                                                              • SHA256 81adb709eec2dfb3e7b261e3e279adf33de00e4d9729f217662142f591657374
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              dsr.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\fr\deepscan\dsr.dat
                                                                                                                                                                              • Size 58KB
                                                                                                                                                                              • SHA256 4649eedc3bafd98c562d4d1710f44de19e8e93e3638bc1566e1da63d90cb04ad
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              bp.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\it\safemon\bp.dat
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 d81e7765dacef70a07c2d77e3ab1c953abd4c8b0c74f53df04c3ee4adf192106
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              DsRes64.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\deepscan\DsRes64.dll
                                                                                                                                                                              • Size 66KB
                                                                                                                                                                              • SHA256 41fc1d658e3d6795b701495d45e8d7bef7d8ce770138044b34fbacad08a617be
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssr.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\deepscan\ssr.dat
                                                                                                                                                                              • Size 47KB
                                                                                                                                                                              • SHA256 656c1ec3308eec42f541e0bf1b719dab057b11b3f549060cb059ca70d525274a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              NetDefender.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\ipc\NetDefender.dll.locale
                                                                                                                                                                              • Size 24KB
                                                                                                                                                                              • SHA256 4d1a978e09c6dafdcf8d1d315191a9fb8c0d2695e75c7b8650817d027008d1c1
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Sxin.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\ipc\Sxin.dll.locale
                                                                                                                                                                              • Size 48KB
                                                                                                                                                                              • SHA256 7e885136a20c3ab48cdead810381dccb10761336a62908ce78fe7f7d397cde0e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Sxin64.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\ipc\Sxin64.dll.locale
                                                                                                                                                                              • Size 46KB
                                                                                                                                                                              • SHA256 ee05002e64e561777ea43ac5b9857141dabb7c9eed007a0d57c30924f61af91e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360SPTool.exe.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\safemon\360SPTool.exe.locale
                                                                                                                                                                              • Size 31KB
                                                                                                                                                                              • SHA256 15164d3600abd6b8f36ac9f686e965cfb2868025a01cded4f7707b1ae5008964
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360procmon.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\safemon\360procmon.dll.locale
                                                                                                                                                                              • Size 106KB
                                                                                                                                                                              • SHA256 51475f2fa4cf26dfc0b6b27a42b324a109f95f33156618172544db97cbf4dddd
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Safemon64.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\safemon\Safemon64.dll.locale
                                                                                                                                                                              • Size 52KB
                                                                                                                                                                              • SHA256 129a7ba4915d44a475ed953d62627726b9aa4048ffcc316c47f7f533b68af58b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              SelfProtectAPI2.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\safemon\SelfProtectAPI2.dll.locale
                                                                                                                                                                              • Size 21KB
                                                                                                                                                                              • SHA256 a71e57cafb118f29740cd80527b094813798e880de682eca33bfe97aaa20b509
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              safemon.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\safemon\safemon.dll.locale
                                                                                                                                                                              • Size 53KB
                                                                                                                                                                              • SHA256 110914328d4bf85058efa99db13bfec2c73e3b175b91dfd6b41c6fa72ebaa103
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              spsafe.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\safemon\spsafe.dll.locale
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 61c130d1436efba0a4975bc3f1c5f9fdf094a097d8182119193b44150344940e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              spsafe64.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\safemon\spsafe64.dll.locale
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 9327e539134100aa8f61947da7415750f131c4e03bbb7edb61b0fab53ea34075
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              nptswp.dll.locale
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pl\safemon\webprotection_firefox\plugins\nptswp.dll.locale
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 09d58a2f0656a777a66288ac4068aa94a2d58d0534328862b8371709eab2003b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              appmon.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pt\ipc\appmon.dat
                                                                                                                                                                              • Size 30KB
                                                                                                                                                                              • SHA256 c308ee41e48cc498c396a2ccbc57b7d29d058dd145f9867887544cb74112d63f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              filemon.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pt\ipc\filemon.dat
                                                                                                                                                                              • Size 17KB
                                                                                                                                                                              • SHA256 a3cfc3c8f95f0ed56306d28ac87408f10875c43bca7778c6e1cc18c7a3441183
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              regmon.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pt\ipc\regmon.dat
                                                                                                                                                                              • Size 32KB
                                                                                                                                                                              • SHA256 dab50e3c2787808beeb0b377ad7c3de2c518578b9f7a4ec4ac29063d59c00b3d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              wd.ini
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\i18n\pt\safemon\wd.ini
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 de1d0fa92911957aeb41a68403b53e96d2b8294a4bc6c3daca4cc2876fac1d8b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360Box.sys
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\ipc\360Box.sys
                                                                                                                                                                              • Size 218KB
                                                                                                                                                                              • SHA256 f3f3faa4a6ba4e81271e25e99badf4318b84637784d563a84a017c5f46ce291e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360hvm64.sys
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\ipc\360hvm64.sys
                                                                                                                                                                              • Size 449KB
                                                                                                                                                                              • SHA256 f89d5d95b8a59e6d5e50a49217f83d080e4eaf4bb77b80d8f38cd915640ba124
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              sites.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\sites.dll
                                                                                                                                                                              • Size 1.5MB
                                                                                                                                                                              • SHA256 a1a1041cde7a0c8cc71eb3faece1b82bb6f8cb407cdccd0cb50c882a429cbac8
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              MultiTip.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\softmgr\MultiTip.exe
                                                                                                                                                                              • Size 1.9MB
                                                                                                                                                                              • SHA256 ae601527a00fc5b72aeebde2305aec93eac9b9a0706393c763577ff510542d2a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360FastFind.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260828011948_240987703\temp_files\sweeper\360FastFind.dll
                                                                                                                                                                              • Size 226KB
                                                                                                                                                                              • SHA256 45a9d2180bc3a6c5716a5ccbf74b14d9e91fa706449aae4046c0835cc672f5e5
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              installer.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\7zS47A53DEB\installer.exe
                                                                                                                                                                              • Size 8.3MB
                                                                                                                                                                              • SHA256 e520f7aad7c8f7f647f4981a8f6fad5cf7c85300a90bec65349414e284e9f08d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              91d8f5de-46d3-4ce4-b508-c7511183d5a6.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\91d8f5de-46d3-4ce4-b508-c7511183d5a6.tmp
                                                                                                                                                                              • Size 4.5MB
                                                                                                                                                                              • SHA256 a0adcf75c407790bffcac773e97ec98c4ae15791cae3f906d03d1907aaf672ff
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ADVPACK.DLL
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ADVPACK.DLL
                                                                                                                                                                              • Size 129KB
                                                                                                                                                                              • SHA256 7735dfb067c97033031d45593c320d1229f3acba896c1a4e815a2d1bfd786b11
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              rootsupd.inf
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\rootsupd.inf
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 94fe83c96d71ca4e80b7426af32c7e02b784d6492b7b16405114b04f4ffc5464
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              __PSScriptPolicyTest_z0xh21ic.pqz.ps1
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_z0xh21ic.pqz.ps1
                                                                                                                                                                              • Size 60B
                                                                                                                                                                              • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              antivirus360.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\antivirus360\antivirus360.exe
                                                                                                                                                                              • Size 1.5MB
                                                                                                                                                                              • SHA256 8105c732ab503aa92faab659bf34b3c069988e7079e4e9f86c37fa9225b8ec73
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              bdvpn_setup.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\bdvpn\bdvpn_setup.exe
                                                                                                                                                                              • Size 1.7MB
                                                                                                                                                                              • SHA256 a50e9fa12a0e7335d33d85e727d6b39cb9be58581b75756cf66fd1d0822b91fd
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Montserrat-Bold.eot
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Montserrat-Bold.eot
                                                                                                                                                                              • Size 256KB
                                                                                                                                                                              • SHA256 7615a4bb88a5680cfead49c1774013ce48c4c7343cb82d7585f7935c705400b0
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Montserrat-Regular.eot
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Montserrat-Regular.eot
                                                                                                                                                                              • Size 314KB
                                                                                                                                                                              • SHA256 057bc6c47c47aaccdf31adc48a6b401f6090a02c28e354099eff80907dc2af32
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Roboto-Regular.eot
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Roboto-Regular.eot
                                                                                                                                                                              • Size 176KB
                                                                                                                                                                              • SHA256 6cedf381d59fa4caabfb836e9a3720420645cbcea32491a5ac5f07cf274ceac6
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              av360-check-on.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\av360-check-on.png
                                                                                                                                                                              • Size 445B
                                                                                                                                                                              • SHA256 8b8f0ad0cdf07227f759cb18c64ff64ae72fcbfc7916524acb355d889ddece3f
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              av360.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\av360.png
                                                                                                                                                                              • Size 216KB
                                                                                                                                                                              • SHA256 caec781eb9c39273dacfb6227adf6db3927b4c55d7591158fe8101238edb2032
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              close-gray.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-gray.png
                                                                                                                                                                              • Size 268B
                                                                                                                                                                              • SHA256 9ba220b02676f499296b258227582e7f9347890e530d0e6795aa476150d909c3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              close-lightgray-14px.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-lightgray-14px.png
                                                                                                                                                                              • Size 271B
                                                                                                                                                                              • SHA256 2d445a49383ef3d251935caebe0a7b178f0bd69b20e54a44f67394409b6141a7
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              close-white.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-white.png
                                                                                                                                                                              • Size 264B
                                                                                                                                                                              • SHA256 c1d3c989cfc39531d46e25867e0f15c552688b3fbef8f5bd59dbae303aae9048
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              install-lenta-2-308.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\install-lenta-2-308.png
                                                                                                                                                                              • Size 19KB
                                                                                                                                                                              • SHA256 e7615879d5639c7b54e886ec6c0603282eac694f3f9dd5e9b793bceec2795639
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              install-lenta-3-308.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\install-lenta-3-308.png
                                                                                                                                                                              • Size 33KB
                                                                                                                                                                              • SHA256 77acc73a5c52b9af37a7277bce542a53444acf41ea43ab4c078f74cd4ad66760
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              install-lenta.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\install-lenta.png
                                                                                                                                                                              • Size 133KB
                                                                                                                                                                              • SHA256 7d59b164ddd2c8b9ee7ff03ce351322009a90ec92cd9ac7957854d2bddb9ace0
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              main-logo-white.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\main-logo-white.png
                                                                                                                                                                              • Size 6KB
                                                                                                                                                                              • SHA256 e3990165ef06c69e64a8c8edd9c1a6b109a6f748e5305009e27adbc45cbff656
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              opera-check-on.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\opera-check-on.png
                                                                                                                                                                              • Size 378B
                                                                                                                                                                              • SHA256 4fef700a16ebb413d3ecae78ab8d1462a5f916afb4ecc567c8ef300a66aa19ed
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              opera-empty.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\opera-empty.png
                                                                                                                                                                              • Size 107KB
                                                                                                                                                                              • SHA256 d163d272e617caf16dca98cf25721b6b78a7a5ec59552af71fb4704758741a14
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              point.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\point.png
                                                                                                                                                                              • Size 159B
                                                                                                                                                                              • SHA256 0914121c7693afd3b625929d540acb7942401d6f46736e6cb8bbf59276d7a1b6
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              settings-checked.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\settings-checked.png
                                                                                                                                                                              • Size 382B
                                                                                                                                                                              • SHA256 d05f0be137ed891926de83bb83fa46c78d01da09b2fb6d62d1fa7dfb57701229
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              soax-mglogo.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\soax-mglogo.png
                                                                                                                                                                              • Size 4KB
                                                                                                                                                                              • SHA256 cce96ae129b268e5a1fed76ce3e2e7e6eb3a5a9c4ba87fd6c22394863a6585e5
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              soax-schema.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\soax-schema.png
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 1398ff3a4bf9bb8011cb5230919bf48f72bdc5f34e3917d773edca3d3a758363
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              index.html
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\index.html
                                                                                                                                                                              • Size 38KB
                                                                                                                                                                              • SHA256 f04ae707ed69a7287e4361fceb22e4c3cc5df25afec50e86dcace966d70d9c0b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              jquery-ui.min.1.8.0.js
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\js\jquery-ui.min.1.8.0.js
                                                                                                                                                                              • Size 202KB
                                                                                                                                                                              • SHA256 8b59592d67eadc703af6cdd5ba8d077f9f9485d01fb6405555614335f89be99b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              jquery.min.1.6.4.js
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\js\jquery.min.1.6.4.js
                                                                                                                                                                              • Size 89KB
                                                                                                                                                                              • SHA256 4a62927a380e201c4ee51321dcc1e6b1f7dfbf82049cf349df990629e01e9178
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              page-wait.jpg
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\page-wait.jpg
                                                                                                                                                                              • Size 14KB
                                                                                                                                                                              • SHA256 a885583e65c215880f4448e853b1c966d8cb96e619c26daf095ba3d0789128cd
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              preloader.html
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\preloader.html
                                                                                                                                                                              • Size 266B
                                                                                                                                                                              • SHA256 ac071e1f7162b4d4a9a195b52fe138a665af7fc207e39ca5d047338acd6a55b3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              BrightVpnNativeMessagingHost.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\BrightVpnNativeMessagingHost.exe
                                                                                                                                                                              • Size 36KB
                                                                                                                                                                              • SHA256 4917e949c5e33647d5425d0262760470f73dbc0796f6cd2d28a69b9813c3cbd2
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              LICENSE.electron.txt
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\LICENSE.electron.txt
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              LICENSES.chromium.html
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\LICENSES.chromium.html
                                                                                                                                                                              • Size 6.5MB
                                                                                                                                                                              • SHA256 9f3f2b4d9bbd3113486839eca85de119fab766450cdca08a4574b80748885708
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              chrome_100_percent.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\chrome_100_percent.pak
                                                                                                                                                                              • Size 126KB
                                                                                                                                                                              • SHA256 9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              chrome_200_percent.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\chrome_200_percent.pak
                                                                                                                                                                              • Size 175KB
                                                                                                                                                                              • SHA256 1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              d3dcompiler_47.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\d3dcompiler_47.dll
                                                                                                                                                                              • Size 4.7MB
                                                                                                                                                                              • SHA256 5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ffmpeg.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\ffmpeg.dll
                                                                                                                                                                              • Size 2.6MB
                                                                                                                                                                              • SHA256 aad7e7ac9d74ac18892801950c9728e9c4eacd3b676cbb5d6f63382da2ce0559
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              icudtl.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\icudtl.dat
                                                                                                                                                                              • Size 10.0MB
                                                                                                                                                                              • SHA256 97b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              libEGL.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\libEGL.dll
                                                                                                                                                                              • Size 473KB
                                                                                                                                                                              • SHA256 85f238fb7ace3cbdf7c29c72b01307c440f13491b07a509cbc5b9f257a637164
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              libGLESv2.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\libGLESv2.dll
                                                                                                                                                                              • Size 7.2MB
                                                                                                                                                                              • SHA256 25d49934fc220b169cadeb21fc99dc2a8fb1dd5a4f244265799392f0f5f2f8f8
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              af.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\af.pak
                                                                                                                                                                              • Size 340KB
                                                                                                                                                                              • SHA256 d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              am.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\am.pak
                                                                                                                                                                              • Size 551KB
                                                                                                                                                                              • SHA256 55357baf28716a73f79ac9a6af1ae63972eb79f93c415715518027fc5c528504
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ar.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\ar.pak
                                                                                                                                                                              • Size 602KB
                                                                                                                                                                              • SHA256 e34d5cabaed4634c672591074057c12947bc9e728004228a9e75f87829f4a48a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              bg.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\bg.pak
                                                                                                                                                                              • Size 631KB
                                                                                                                                                                              • SHA256 fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              bn.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\bn.pak
                                                                                                                                                                              • Size 812KB
                                                                                                                                                                              • SHA256 e325d936cd97c3f9ddfca2d87caefb8b6e7465ffa31d0386ae2456b18f7a92da
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ca.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\ca.pak
                                                                                                                                                                              • Size 384KB
                                                                                                                                                                              • SHA256 e1d6b5fd0bc411f2895eaaa1409916f5ffe39a5c6bd1bafe8af7ce33da5be17d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              cs.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\cs.pak
                                                                                                                                                                              • Size 393KB
                                                                                                                                                                              • SHA256 936466784a55b965d23b016bc49377655bc5d281d012c8369c0809c961e05c74
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              da.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\da.pak
                                                                                                                                                                              • Size 356KB
                                                                                                                                                                              • SHA256 1b0793b1cbeb6a56ff1e64523c37ba753457320aa29f9718022caa07b4981d8f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              de.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\de.pak
                                                                                                                                                                              • Size 381KB
                                                                                                                                                                              • SHA256 e0f632ce324951002c80e019dd0169be9f6b0640533fa434cd6ca80f28a1d3f7
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              el.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\el.pak
                                                                                                                                                                              • Size 691KB
                                                                                                                                                                              • SHA256 92403b6160e38746597d4dd7f64d64cf19e30b5e7862901263c39679187b2c91
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              en-GB.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\en-GB.pak
                                                                                                                                                                              • Size 310KB
                                                                                                                                                                              • SHA256 463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              en-US.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\en-US.pak
                                                                                                                                                                              • Size 313KB
                                                                                                                                                                              • SHA256 bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              es-419.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\es-419.pak
                                                                                                                                                                              • Size 380KB
                                                                                                                                                                              • SHA256 5aff3762747a6e8c6df9f2a3b470bf231b44163006b17ce87e2a03694be27b81
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              es.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\es.pak
                                                                                                                                                                              • Size 380KB
                                                                                                                                                                              • SHA256 267e7b6376e7e5ab806b16fde93bbbcd961bf0c3a7b3a2cabccab37faa9a1d16
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              et.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\et.pak
                                                                                                                                                                              • Size 342KB
                                                                                                                                                                              • SHA256 d984aee4d18ca24a88846b1b6e0294d373733430f30bb4f1b97bc7d50d512c2e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              fa.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\fa.pak
                                                                                                                                                                              • Size 557KB
                                                                                                                                                                              • SHA256 221bbbde078d135f6daca4978a31cc6a82f8f46536467ebc9a0cd322c58a7785
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              fi.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\fi.pak
                                                                                                                                                                              • Size 351KB
                                                                                                                                                                              • SHA256 5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              fil.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\fil.pak
                                                                                                                                                                              • Size 394KB
                                                                                                                                                                              • SHA256 4cd3fa70487e894400ad29e3bfbfba3e1c5edd799aab12c62c3aff3c2580ce5e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              fr.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\fr.pak
                                                                                                                                                                              • Size 410KB
                                                                                                                                                                              • SHA256 1f6bc09499ee37456968a28b67b81bbf5b9df4f0c6035a388242d2037a3b65a1
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              gu.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\gu.pak
                                                                                                                                                                              • Size 787KB
                                                                                                                                                                              • SHA256 c36a20730d5f2b91cb61b5b2a5912db2ea5a328a9b8abe0fca0af300446d3c20
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              he.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\he.pak
                                                                                                                                                                              • Size 488KB
                                                                                                                                                                              • SHA256 875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              hi.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\hi.pak
                                                                                                                                                                              • Size 821KB
                                                                                                                                                                              • SHA256 1e9623c7407ae8b8a88df3f69a47ae8117f74c4dcb56897bb794a9c38ee5805b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              hr.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\hr.pak
                                                                                                                                                                              • Size 381KB
                                                                                                                                                                              • SHA256 3d7685163c5eb6a11e745ff934312b8681c5f85dfa8d9ea701e9dcaee1e7a285
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              hu.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\hu.pak
                                                                                                                                                                              • Size 411KB
                                                                                                                                                                              • SHA256 3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              id.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\id.pak
                                                                                                                                                                              • Size 336KB
                                                                                                                                                                              • SHA256 9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              it.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\it.pak
                                                                                                                                                                              • Size 373KB
                                                                                                                                                                              • SHA256 c0dc0a4a87f7bb054a30eb1174c3228ea2014bd94668a7d22995b99c4937d817
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ja.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\ja.pak
                                                                                                                                                                              • Size 456KB
                                                                                                                                                                              • SHA256 3accfd9a1833ddeedb2082fb94101beb59b555c60f42e3070e9e04a372eba84a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              kn.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\kn.pak
                                                                                                                                                                              • Size 910KB
                                                                                                                                                                              • SHA256 90b2df3338468e84e2cf2f2f67597cba5c3ceb5dba9c59ebd072ec15a70ce741
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ko.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\ko.pak
                                                                                                                                                                              • Size 383KB
                                                                                                                                                                              • SHA256 b04c1b91cab31054be70cb851dc6716065545445801045daceb96eeee4d2334a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              lt.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\lt.pak
                                                                                                                                                                              • Size 412KB
                                                                                                                                                                              • SHA256 9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              lv.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\lv.pak
                                                                                                                                                                              • Size 410KB
                                                                                                                                                                              • SHA256 b5a31cbfcb40ad8d911de1618c4eb7e8cc67b97eb8878220f15d40eb014d8ac8
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ml.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\ml.pak
                                                                                                                                                                              • Size 948KB
                                                                                                                                                                              • SHA256 61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              mr.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\mr.pak
                                                                                                                                                                              • Size 772KB
                                                                                                                                                                              • SHA256 481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ms.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\ms.pak
                                                                                                                                                                              • Size 351KB
                                                                                                                                                                              • SHA256 fe58cc4f62fc31e32c1fb9a0893a5483391ab6a91b1c92ed4a5e3103a962da7a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              nb.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\nb.pak
                                                                                                                                                                              • Size 344KB
                                                                                                                                                                              • SHA256 d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              nl.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\nl.pak
                                                                                                                                                                              • Size 356KB
                                                                                                                                                                              • SHA256 55413d5eddb3300e0ae0fa5d79d26fdf1e5a12922d7018c8054b1faa9d660301
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              pl.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\pl.pak
                                                                                                                                                                              • Size 396KB
                                                                                                                                                                              • SHA256 53b59486361b11512fb90f15065104b15ee2322bb7804f859cde2f2ecf9581fb
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              pt-BR.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\pt-BR.pak
                                                                                                                                                                              • Size 374KB
                                                                                                                                                                              • SHA256 c9ec3822044365457b8736348cf95a8e39bdfe3ed36267449bf3ed739accef2e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              pt-PT.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\pt-PT.pak
                                                                                                                                                                              • Size 376KB
                                                                                                                                                                              • SHA256 c89170385b3afb2ec89fbd61b8470ac718713c7296441c8430f173dac218e74b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ro.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\ro.pak
                                                                                                                                                                              • Size 387KB
                                                                                                                                                                              • SHA256 7247470057a936d03bfa2a8776508ab66aa1040c41a4eb8f79c1e93551c74bb8
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ru.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\ru.pak
                                                                                                                                                                              • Size 634KB
                                                                                                                                                                              • SHA256 b4223b56ec88235819a427d60bb937eb3984076523f02a018f57819e0429bea9
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              sk.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\sk.pak
                                                                                                                                                                              • Size 399KB
                                                                                                                                                                              • SHA256 75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              sl.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\sl.pak
                                                                                                                                                                              • Size 385KB
                                                                                                                                                                              • SHA256 6002c129a56558832e9bd260c427c0bd2e1566e0aea3ad999f89c8e479534f9b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              sr.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\sr.pak
                                                                                                                                                                              • Size 595KB
                                                                                                                                                                              • SHA256 524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              sv.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\sv.pak
                                                                                                                                                                              • Size 347KB
                                                                                                                                                                              • SHA256 3420a1fbcca5bf8c2d65d6dcb0db78b03f95f7f2fc56479a0de6e3312333ce6f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              sw.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\sw.pak
                                                                                                                                                                              • Size 365KB
                                                                                                                                                                              • SHA256 690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ta.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\ta.pak
                                                                                                                                                                              • Size 936KB
                                                                                                                                                                              • SHA256 7e818deedd50a533851bbf08e056bf2ad8d45f442a1a61d9b48e66804ea848db
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              te.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\te.pak
                                                                                                                                                                              • Size 869KB
                                                                                                                                                                              • SHA256 d839531c4ff4a2885c993e0d358f78667215b0950c77a06ef01a6acff9221c5b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              th.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\th.pak
                                                                                                                                                                              • Size 731KB
                                                                                                                                                                              • SHA256 cd80bf232f2f128a3d411f52c8039987559dbc1055f746eed6e0e8478b116dc1
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              tr.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\tr.pak
                                                                                                                                                                              • Size 371KB
                                                                                                                                                                              • SHA256 b22fc7b75c52cc142f201d5cf107d17c1b173a494a6add022127f559fb46bcb0
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              uk.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\uk.pak
                                                                                                                                                                              • Size 634KB
                                                                                                                                                                              • SHA256 28ea88f19b2c34699d535ca0c691449b7e4001c12e8aed8d04b2078916e88a37
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ur.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\ur.pak
                                                                                                                                                                              • Size 552KB
                                                                                                                                                                              • SHA256 4c7affdcc324cd791d10e235da809ce7501e8005be64340b6e8bf5595647a707
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              vi.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\vi.pak
                                                                                                                                                                              • Size 439KB
                                                                                                                                                                              • SHA256 b75694e390bd2e20780b3bc72f6e1473ba45d7537c27642a7d888dfd3bb6c3bb
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              zh-CN.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\zh-CN.pak
                                                                                                                                                                              • Size 319KB
                                                                                                                                                                              • SHA256 a7ac9fda6f4cd189b75fdadc4b70cd0d369a09b66eaeb5d032678cb97ffc98f6
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              zh-TW.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\locales\zh-TW.pak
                                                                                                                                                                              • Size 316KB
                                                                                                                                                                              • SHA256 c5061ec00bd969f76f3c0c6ff15ddacafed7491260bd8ced78118691ba57bdff
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              lum_sdk.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\lum_sdk.dll
                                                                                                                                                                              • Size 8.2MB
                                                                                                                                                                              • SHA256 d5234854b45cc03961fe2604ec36c57abd1d90e3c448a7dbecdf0bdaca64aac1
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              lum_sdk32.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\lum_sdk32.dll
                                                                                                                                                                              • Size 10.0MB
                                                                                                                                                                              • SHA256 69a587cf08c411eaddc96b6e2ba5cc9987ff200d2d0551f2e7c33ff991fc7b41
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              lum_sdk64.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\lum_sdk64.dll
                                                                                                                                                                              • Size 10.2MB
                                                                                                                                                                              • SHA256 5c39b8d790e19765f63f97322686f41ba7dbf535182349305d5ca4040bca57ee
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              native_host_manifest.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\native_host_manifest.json
                                                                                                                                                                              • Size 323B
                                                                                                                                                                              • SHA256 7e1a72b5b4d0a83f63c5d199acb893818484d42e085360db990c1c25cde477cb
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              net_updater64.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\net_updater64.exe
                                                                                                                                                                              • Size 13.3MB
                                                                                                                                                                              • SHA256 1c1985324f86d9a86f5b28993616ab3dd866aea866d210139715b7913bb3772f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              resources.pak
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\resources.pak
                                                                                                                                                                              • Size 5.1MB
                                                                                                                                                                              • SHA256 4f29587bcd952de1dbc0b98df0aa506bd9fcf447e6a7258c5eb7e9eb780e6d6c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              app-update.yml
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\resources\app-update.yml
                                                                                                                                                                              • Size 109B
                                                                                                                                                                              • SHA256 dfbc06fb21cb961e3e1573a3fc704b894a09255353632194a3c3a535e691139e
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              app.asar
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\resources\app.asar
                                                                                                                                                                              • Size 7.1MB
                                                                                                                                                                              • SHA256 e5b01542890071034017a250673b5a2a92921661ecef28fd20eff03b9e62b030
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              elevate.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\resources\elevate.exe
                                                                                                                                                                              • Size 125KB
                                                                                                                                                                              • SHA256 f57f166e54d250b4b1abce4d7e45cd5930cc7368d8575b0a6d634c4bb12a5a3d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              snapshot_blob.bin
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\snapshot_blob.bin
                                                                                                                                                                              • Size 168KB
                                                                                                                                                                              • SHA256 8613412ebcf462373d4d50f5729f5b9a61ef2b5c599b267f750276c8e29caf25
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              v8_context_snapshot.bin
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\v8_context_snapshot.bin
                                                                                                                                                                              • Size 471KB
                                                                                                                                                                              • SHA256 add78f3f85f0b173cbe917871821f74c5afe0a6562462762b181180d16df4470
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              vk_swiftshader.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\vk_swiftshader.dll
                                                                                                                                                                              • Size 4.9MB
                                                                                                                                                                              • SHA256 a32c3fbbf74699a10e7642bf4901191f29c88c5aec93ae7ba28c79ab28462a69
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              vk_swiftshader_icd.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\vk_swiftshader_icd.json
                                                                                                                                                                              • Size 106B
                                                                                                                                                                              • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              vulkan-1.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\7z-out\vulkan-1.dll
                                                                                                                                                                              • Size 894KB
                                                                                                                                                                              • SHA256 1f8b647f161f20d45d554e349b3e5ef0b7b5da8c7bdbc1ff631d37dc9c819503
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              INetC.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\INetC.dll
                                                                                                                                                                              • Size 238KB
                                                                                                                                                                              • SHA256 ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              StdUtils.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\StdUtils.dll
                                                                                                                                                                              • Size 100KB
                                                                                                                                                                              • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              WinShell.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\WinShell.dll
                                                                                                                                                                              • Size 3KB
                                                                                                                                                                              • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              nsExec.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\nsExec.dll
                                                                                                                                                                              • Size 6KB
                                                                                                                                                                              • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              nsProcess.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsnB786.tmp\nsProcess.dll
                                                                                                                                                                              • Size 4KB
                                                                                                                                                                              • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              opera_binst.exe
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\opera\opera_binst.exe
                                                                                                                                                                              • Size 3.1MB
                                                                                                                                                                              • SHA256 ed560626e15191ee21106154a5557121d5d58e369cfead590de9b41dbea0125c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              favicon_opera_one.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir10040_1733517855\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Icon_Light_Neutral.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir10040_659945232\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              content_new.js
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3356_1019035922\CRX_INSTALL\content_new.js
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              360P2SP.dll
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\{72676E64-5670-4977-B226-334C4D9202C4}.tmp\360P2SP.dll
                                                                                                                                                                              • Size 824KB
                                                                                                                                                                              • SHA256 bf1b96f5b56be51e24d6314bc7ec25f1bdba2435f4dfc5be87de164fe5de9e60
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              default.exc
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                                                                                                                              • Size 2B
                                                                                                                                                                              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              521621ec-5f40-47a7-b427-c4d080a85e2e.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\521621ec-5f40-47a7-b427-c4d080a85e2e.tmp
                                                                                                                                                                              • Size 3KB
                                                                                                                                                                              • SHA256 18dbbeebb4ed235b47efed9f2abb9682ac5e6e443e2e9b6f2c61f5d59507bd8b
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              settings.dat
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                                                                              • Size 40B
                                                                                                                                                                              • SHA256 3ddcbc4e33054afac9fdaf7ffe3fcf6b0d9d96ca08039456b0289e1e454e30d4
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              448388d7-1d75-4ee8-b169-5810958bfcdf.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\448388d7-1d75-4ee8-b169-5810958bfcdf.tmp
                                                                                                                                                                              • Size 14KB
                                                                                                                                                                              • SHA256 1a6c64ea0bd668a1f6dad834edbb231f65b715e1757c64517f5688d5f86e18fa
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              6cd42e33-ea06-4458-ab98-c25fc03dccd7.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\6cd42e33-ea06-4458-ab98-c25fc03dccd7.tmp
                                                                                                                                                                              • Size 30KB
                                                                                                                                                                              • SHA256 f30233effa07c75f81d8b22a189ccd99ce6270143b09765563d5562f9bc0d9cb
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              9b086241-4c63-4e70-ae38-955849eafd6f.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\9b086241-4c63-4e70-ae38-955849eafd6f.tmp
                                                                                                                                                                              • Size 48B
                                                                                                                                                                              • SHA256 ddb9d890346662eb42cbf6b43fca02e4cbdf8ecc9973a024191ecbf2ad840d6b
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              the-real-index
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                              • Size 480B
                                                                                                                                                                              • SHA256 9fcb359a3468ba2869bdd4aaa20c1787d9325a9b62e06d81d42877ccb6260bc3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              the-real-index
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                              • Size 744B
                                                                                                                                                                              • SHA256 6ac95a465fbc77f332cfb68a14774880bb996ffdc76989dfa59a49d6b4ed74f2
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              main.js
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
                                                                                                                                                                              • Size 46KB
                                                                                                                                                                              • SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              logo_128.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                                                                                                                              • Size 7KB
                                                                                                                                                                              • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              logo_16.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                                                                                                                              • Size 653B
                                                                                                                                                                              • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              logo_32.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              logo_48.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              logo_64.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              service-worker-loader.js
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                                                                                                                              • Size 49B
                                                                                                                                                                              • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              favicon_opera_one.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\favicon_opera_one.png
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              reader_mode.js
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\reader_mode.js
                                                                                                                                                                              • Size 112KB
                                                                                                                                                                              • SHA256 dd4d3dfbd760159952c05355fdc4bc738488fe02e0e8dc43704e2095b6c76c1e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              service_worker.js
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\service_worker.js
                                                                                                                                                                              • Size 89KB
                                                                                                                                                                              • SHA256 54a79133f29c7d1da2b6cbd5934a8fa8a60bdcfef8c23e449cd04e0ccd2cbf27
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              spotify_frame_interceptor.js
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\spotify_frame_interceptor.js
                                                                                                                                                                              • Size 5KB
                                                                                                                                                                              • SHA256 442264acc3e319d41ee98a0df10538500eb7914b0be345689340c83cfec1be7d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              background.js
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                                                                                                                              • Size 86KB
                                                                                                                                                                              • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Icon_Light_Neutral.png
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              popup.js.LICENSE.txt
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              rules.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                                                                                                                              • Size 839B
                                                                                                                                                                              • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              3e1c296c-74da-498b-a8be-560214609e99.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\3e1c296c-74da-498b-a8be-560214609e99.tmp
                                                                                                                                                                              • Size 27KB
                                                                                                                                                                              • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              470d7dd6-9290-4ebc-93f7-ae4e3aa5b7a7.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\470d7dd6-9290-4ebc-93f7-ae4e3aa5b7a7.tmp
                                                                                                                                                                              • Size 27KB
                                                                                                                                                                              • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              4d204f85-cbe1-4822-b91d-6af06e0ed8ec.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\4d204f85-cbe1-4822-b91d-6af06e0ed8ec.tmp
                                                                                                                                                                              • Size 27KB
                                                                                                                                                                              • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              61e1fcaa-1265-407d-9755-aca77570a87a.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\61e1fcaa-1265-407d-9755-aca77570a87a.tmp
                                                                                                                                                                              • Size 27KB
                                                                                                                                                                              • SHA256 bbc88bbc4b7296bf43b0054a0c2d8288b36e15215b8164e5cc0c99ca5a60d7f3
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              9110afc2-1212-4741-abfc-b99a18e660ae.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\9110afc2-1212-4741-abfc-b99a18e660ae.tmp
                                                                                                                                                                              • Size 27KB
                                                                                                                                                                              • SHA256 3a9c655a88437e331f50a23bb40cb1a3de86277cb1a9488c81c426598cfab0a3
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              f9a5705a-9d1b-4172-b6fd-7653ecc17da9.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\f9a5705a-9d1b-4172-b6fd-7653ecc17da9.tmp
                                                                                                                                                                              • Size 27KB
                                                                                                                                                                              • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Network Persistent State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 de84d834f0718b651c425a3113a6817522ecd2ddcb58f75b30f7d76d93a13f08
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                              • Size 15KB
                                                                                                                                                                              • SHA256 bea6713feead0e44811ac8dcf660aa8c93b1ef45641585c9cc0ee94d33414752
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                              • Size 14KB
                                                                                                                                                                              • SHA256 2f58658ebf8951aecd61e4ea3b39490add35e8eb47ada8218d1fcb243f9a946b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                              • Size 14KB
                                                                                                                                                                              • SHA256 fee8d21f61a3498841011676e53f7b6fe310aa677a0a67cdc8a536ef19053cd0
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Secure Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                              • Size 99KB
                                                                                                                                                                              • SHA256 2a7b0755e2a349f992d12663e2691c0e7a74e304c8d878dc5945c773d0270e2d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Secure Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                              • Size 82KB
                                                                                                                                                                              • SHA256 629563e4299083e8bf9c5aa3a1e096d8ccd16c5f2a40f2b797fd8e4035405496
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ba23d8ecda68de77_0
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
                                                                                                                                                                              • Size 46KB
                                                                                                                                                                              • SHA256 a5daa5a0391d962a252190c971be6f032a0b6a286f99f26be6a996da43117754
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ba23d8ecda68de77_1
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\ba23d8ecda68de77_1
                                                                                                                                                                              • Size 110KB
                                                                                                                                                                              • SHA256 b71e21997b923c4be451b7f8e3dc1ce0ddf2d306bf07764c8341f97d864f0ca0
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              bbb50ea4-d737-4b88-8e4d-4286c001f460.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\bbb50ea4-d737-4b88-8e4d-4286c001f460.tmp
                                                                                                                                                                              • Size 48B
                                                                                                                                                                              • SHA256 26338fee0c46b2e85d52202f85baac858d2794c3daebb969c13e78afb3b4b157
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              the-real-index
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                              • Size 120B
                                                                                                                                                                              • SHA256 e46e38826dc87987257cf5cc253c725975a472488fe6c66cdcc8ae74595846d1
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              the-real-index
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                              • Size 360B
                                                                                                                                                                              • SHA256 681a02a7b065e9be764841fdd9d776b0320fe6433df1bc61fd7de2bcd64d74ef
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              e6e90e4d-9d3c-4162-b6c8-60c230460a86.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\e6e90e4d-9d3c-4162-b6c8-60c230460a86.tmp
                                                                                                                                                                              • Size 413B
                                                                                                                                                                              • SHA256 0aa169b07fbfb93721cd9844a3a2996fb261468b36d1a1098b1b75c87e9130f2
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 11KB
                                                                                                                                                                              • SHA256 198a5bae65228dd278d96357ee75d03e0e36a9c240f63dce42a2793d0f055505
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 637B
                                                                                                                                                                              • SHA256 7c9f0fcc43a966882693b1421a93ae68583a3d1e3eb677619baca6d3d46436de
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 797B
                                                                                                                                                                              • SHA256 d28e73b294a44f51509d3366284a4df6a773720bdb38a7bb848109090af6f5a1
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 34d40eebedd818f4e99de60b90279f992efbb536c0b45934f75113a65fa2efbd
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 7KB
                                                                                                                                                                              • SHA256 36cd3d2faf80da4ce9ed676424d9fec7bc4dd6f52e2f0060381b60b664c13039
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 7KB
                                                                                                                                                                              • SHA256 3d18050a3287f576e9766d8e18d090bcb156d486cf4feb56430d8c390ecf129b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 6a39b44d1380728f1924da2d2c555932a1c35d3cb726d4447ced42a4c2d4eef5
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 fa5a225b89fc2e0e08f7acd9884736e50e2c3259892b776c60e8a9fd25ee0261
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 3e2aa8f7b618ae1cabc2e468b5e2cc0f0555639236677208b35a9c52e7b27e35
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 8e82ca8f895a55c83164c78d8e4845d7a0d3a2651f15189fc22d988ada1fddf3
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 a3413c8ef1fcfe2fa5c94f5ec2c970a7a2f2c00ad0c1032454b53312f971b738
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 92fb1bcf2250f1b5b51c50b9585f9f463795125e9f59247aaa0699561c8ba83b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 14c818c570d281608e02715b8bb7688f2265324ed31cf43ca659fb695da12d3c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 f8eadef33ded0eaa8fbcf168e699efa3bab6199ff4b140bf6872ecfa62356910
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 bf1c1c229241c782e4ed0443b502b206e98b19033b03c897e913b9e3d9bf847b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 f22fc550450e396478932c7e6aabb5f36e1d88a84d4aa28fba81c0f8c795921f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 11KB
                                                                                                                                                                              • SHA256 4e27fd96a74887fd5856b556a168020bcb515f8b0dbd0ba5129e3a96091d7b9e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 11KB
                                                                                                                                                                              • SHA256 ad770baa9e0888fb52ff46934eb9511dbc1e3ec03c0d7145a913f99ff5e54622
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 11KB
                                                                                                                                                                              • SHA256 1513c93f5b94d9471f3ac1b7b5424221d047ee2da573ab7a38c8f81f8824f624
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 12KB
                                                                                                                                                                              • SHA256 23498498bc48ad477ec612d587af03fa02d90cbad41ef85319da76264530c879
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 12KB
                                                                                                                                                                              • SHA256 4b4227e8161e13b8646c020f585cf54040d2b50414935d96944a2921925666c6
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 12KB
                                                                                                                                                                              • SHA256 9accb6321af9bd714ba1f3296dec0f08ef60e041ea9338ff7479947d9fa9c014
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 c1c697ccf0141f8a541c175eb309c970153604425954118fa6617a849531f7ec
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 509B
                                                                                                                                                                              • SHA256 8b7bfbf818f5394887cbe591257fa1d6c2a10ecfdb5fe92ab3c41a69109edd25
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 925B
                                                                                                                                                                              • SHA256 62eb83fdfa2f98e94f398b9f7458dc61657b3727960474ab4a25b500a4803f35
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 adb3daf1598e355418c7f16ddff968ba87baaebcf9f3453fc7f006c3f7440fcb
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 edb20b0012281478fd60b00cc1837ea3afa60d3734c914d051ac1f1689684942
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 3a442a47d53c82415befd60a6095ff1740b299d7c23a14f3897b3df0b0db4272
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 609f3b1ddbe0d4e4c43c95414d2a84e333fcc727c1523368ee3fc89dd1f0d303
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 eed86a2066e513b6e7103f7e813b80f2e06acc7b47cc6022ec172a82b0fc89c7
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 b6a2e7eedfdb1488346077a52dcd976c7e5e7da645cb0794a702dca1a8791159
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 94673eca4f7256e2adfa1753226e6fe9999d1f978d3bef6b529aec4c338a2c0b
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 48cbaa7f0da408bc02b5f48c044bff469918c030558036ca0c807569f28f0c4b
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 83f44479701c97e9c90e6aa09497297489c1e2b0c3978ff058113cfc45408135
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 6497808bd19d6f4d45505db6bc7c55b29886b1ea9c2ac9bd7bce69ef431e5242
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 0589520ef11a201f58fc4b80dbeb58a93f8337d1389a856f289cef095b83aa54
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 8KB
                                                                                                                                                                              • SHA256 809f1917d12d7056f5b713f604c17b5988657f8fdef4c50e286874488d87140c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 007942f5a7214724976a613d84e06fed673aea9022b4dd7b63484b00b8009217
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 9fee6b3e7a5ffa96f0fc9c6334e5b976307d2af96d1a07b9653ac5a285c24a0d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 ed6eb0d7e2e119dd35ba7d644d144c3230c948dbb9ada4811f60d7cde9439459
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 7c09a17f1fe5569cd8e148b0b96149243f4d76960347f648cc80a78f885caf80
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 cdaf3d2d14ab8fa8249686706a4097473a1dd1a2e002f247b970582d4cd9a953
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 681c58a0dbd40c36e52764a83cc30dd1d920509c7ec9f7069548d0671eb22123
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 9db9427855d6e82b3d37c57eacfbf61d5df28aac9be23361570f5ea3b7240b55
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 1a60f8d95b28d24d75315a560d4649ad60998af40df8a3834322b88d8f9abaf1
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 f54031864912bb82db7e4643a24d6b3001189eb6ae704d22572c22d81bcf0f5a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 c6a8425ed68470e83bd8400248aa4ffcd737def96201799f85bb081ad1b13e8e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 bcf329cbf22027aaaf8b2db05604a6f35d4730582b2408ded3e9bfb03940c229
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 374b8bcf0589ac0d032527d9229c2eb68748c05336416edb31e723fb6e3278d9
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 c74afc03861c2c8e107a39cfbb0ce1f8d48144c4748609f137f7ad0542041548
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 37669f1c8e831451b7360d056a4a8c0989c3a31351340d89e741ef337e7cdcc4
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 12KB
                                                                                                                                                                              • SHA256 7143883b01dace395eb0d07480eed917da147e068c770935ca67cef986dd401d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 12KB
                                                                                                                                                                              • SHA256 fd7458121c1bf4480afc5e820bb4decc3324f7718eb6e483dcb6bd377b509020
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 13KB
                                                                                                                                                                              • SHA256 694997fbc985bfd6572acae28a7c3837812d141c935daa205a3985cdd7403970
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 7KB
                                                                                                                                                                              • SHA256 1f37b1fa6f2789b0046146c939c63b43eaa66e03e85c153330a1912bb7ebb765
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 d0e25737fbdb2c947cb2ca9bf7d217e0f1277e47bb4dab26c7170a7440d4b98c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 f12c2c093a47a8e17d67fb4fa5909f2f887b0aebdb8d5158e766ce46507bd67a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 205d1388ea9afc1137f7da555abebcb143bdbd110a47381241eef4f9a76e4e8f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 11KB
                                                                                                                                                                              • SHA256 d2e559d8baa69bc7c82a11d0c89f56036d576aa73699d6e2c6e0674c8777ee8a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 11KB
                                                                                                                                                                              • SHA256 f2b4eec1b98d6bb17c36a69f9ad2dd9c0eba3f9e28d48bb786b970918f845f73
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 11KB
                                                                                                                                                                              • SHA256 f847f7c65f21366da5f7fd7818ce9f0e1d0f39bdebae8a8e2cca06a91c13b6ca
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 0f9501a68faf406d3ef93a83b8525435dd65e6b77eb521aa38adf91171864c2f
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 0bbdc786b3293a2f746c1abbe90966405987a30328c5ddf10a35404d2a621634
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 6d75b9d7bae4f0991ca6a1225ad44d1ff748659fc3942ff355ae931aa24747f5
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 19cf21dbe3296ee8cb3a959f25006836c503d035df5a87f886720564e11bcb0a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 12KB
                                                                                                                                                                              • SHA256 f909a49588a76bc7ed47888eb116f461168b7cb44c4279d9c43a517881e05fd2
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 9KB
                                                                                                                                                                              • SHA256 c36b3579631514cb9a441a34233f167977ee404fffc525e273d34571b6e0f6cb
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 11KB
                                                                                                                                                                              • SHA256 02edf85d11a295778955eab34d4233708e332a3cc16462ce8f88cce277e01b15
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 11KB
                                                                                                                                                                              • SHA256 a9c0a01b5621573abad333cbac81447b6d203d8b504589070a0eab889d14f159
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 11KB
                                                                                                                                                                              • SHA256 dadc97cdaeb5d4f51484da1b18ec18492a0f3dd8de65eb32b0a5d33ee7b2fb64
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 10KB
                                                                                                                                                                              • SHA256 64c578f77e6ea2b613d8f9a09d903c5409e645d017114cb9877de6eb4355ad4c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9cd2ab94-95bd-4c0a-ab9c-fe71ace7774f.raw
                                                                                                                                                                              • Size 11KB
                                                                                                                                                                              • SHA256 327cb0dc6747ddd2609e3f0f4afe3128bca4d2402662911c1b0cf52af7dcb840
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              c1753878-0b46-4cde-99fe-9af84d936da9.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\c1753878-0b46-4cde-99fe-9af84d936da9.tmp
                                                                                                                                                                              • Size 610KB
                                                                                                                                                                              • SHA256 77db20fd5735ed874bc469039a5a9d257ded5dab87f80c738dc0a2200f60e15d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              c7644e47-1688-4e8d-b2d6-fb49d22dd90e.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\c7644e47-1688-4e8d-b2d6-fb49d22dd90e.tmp
                                                                                                                                                                              • Size 357B
                                                                                                                                                                              • SHA256 66f8e23b88661bf08348c69bb033e5941609c8ab2adeb055a7c2f4e005333846
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              d572256c-4c8e-4b01-8b4d-61edc578211e.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\d572256c-4c8e-4b01-8b4d-61edc578211e.tmp
                                                                                                                                                                              • Size 81KB
                                                                                                                                                                              • SHA256 19f27f7e315bf146b84d7cb96ee70fec8eb11757470dedc529c9c3233b9cf79f
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              f706d6fd-92ea-4a4c-af0e-73eb1a4725b8.tmp
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\f706d6fd-92ea-4a4c-af0e-73eb1a4725b8.tmp
                                                                                                                                                                              • Size 171B
                                                                                                                                                                              • SHA256 a6369eed2cb74001689409ce4c4cb543ba6a1639773084df1925ce76503c5c80
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.0.1650501495
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.0.1650501495
                                                                                                                                                                              • Size 455B
                                                                                                                                                                              • SHA256 7ea481b303223df1c2fac3cf6ee0701c43e739059c7ab98cd09427517257f03e
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.0.1650501495
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.0.1650501495
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 533ee022907b665a741f2ec0e69c2e9ed61bda26cd81752ec9fd3c074c8c3a50
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.0.1650501495
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.0.1650501495
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 8c3a95d8bea9d2e826149cc1eb99709f45a0c961c11d8f383915591358a83871
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.0.1650501495
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.0.1650501495
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 694ddf09396852ee067604209ea7c77d151c004948de12abe9d43c3f55a0e4eb
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.0.1650501495
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.0.1650501495
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 33240e56cf41ea8885e9daeeb82520f6ada8fee4fa88c3a7b463f0a8684c10e0
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.0.1650501495
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.0.1650501495
                                                                                                                                                                              • Size 3KB
                                                                                                                                                                              • SHA256 c1246140ffb8db87e78303c090e7e714b9f4a83b34a8789147019d5785850533
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.0.1650501495
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.0.1650501495
                                                                                                                                                                              • Size 3KB
                                                                                                                                                                              • SHA256 3a223ba5d83bbbe64d400c221150cd86d9a38647255a0202bdbfd9f49486a3fe
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.0.1650501495
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.0.1650501495
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 c7e6bc689c091c71bc68f35e0360e6103faf78987b0f90508cbb619956713880
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.0.1650501495
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.0.1650501495
                                                                                                                                                                              • Size 517B
                                                                                                                                                                              • SHA256 750bf1cc161cb9e3ab29d28618f6804ffec09b65eea04823af443556879d8164
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.0.1650501495
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.0.1650501495
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 2d079d3fc5a0467a3eba930b4ebae9a728d3200550a1bc49c78212d20472c6d4
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.0.1650501495
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.0.1650501495
                                                                                                                                                                              • Size 2KB
                                                                                                                                                                              • SHA256 62f991970ea31d09312256ad3af511aaff4c3c01b5646b36c2bfc64a5dc62282
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 7a43afdf2ee6cc02aa44d1e58cefc9ed3bff8cc63e647031d394a98e4b8305d6
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 5a56990257b11a14cbf10544b9d51c43eb2dbfbab1d749c134b6f9d99b3a4734
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 91dfa233ec82fe81302dce83c02e80944f1a768b7eb3044e15dcb1c1fdb40d0d
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 f7e319483a9c100a80ee835ab5f68d84718b93404052b6e6451b19ddadfcd585
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 cf1cfedb0c14e33ad61c522995a59bc29ec150af3e3c2648da170cbfb79008b9
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 e55266e1113d35a8a1b4952b04904e99a7156aef2b6df42ecfb15d2c8dbea50f
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 664B
                                                                                                                                                                              • SHA256 aee0f533b411f4c1fcd273e4fecef75c147060abb4e02cb7b69ad2dfc2e338be
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 758B
                                                                                                                                                                              • SHA256 d54b116146253bc9b38c02a3e1a01d5d01b13383b9256a91dd5aad8f8d009b6f
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 854B
                                                                                                                                                                              • SHA256 b9eb9a7b219e066f5f86bf44713d6f0c4d6ce84eab3dcb817d950d4ffc350f95
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 2cf2912c0b92c6937e47c1b97b8fcab262634582dd1d3a1435390d009847329e
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 5cae46e446f65578934fbd8c6b78b05b1a194f82a23cf1f5c28dca92f59c3adc
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 6b76aa8db78afb5d4d8b1ac8371b3ecbb484d3c1004d4a7bd050ff4c8d06936a
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 296B
                                                                                                                                                                              • SHA256 bd178439aacf430ef3c35c6ab47df17911cab8777c5872bbaff183c231a65e65
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 577B
                                                                                                                                                                              • SHA256 e45bb43f9749f282fb713482b420023703e1bb43e74e167c6efcd4d2c4a8e2de
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 939B
                                                                                                                                                                              • SHA256 20a7cf70d7b493bf3b5307f2ae8e464043f60cc7bac545401e01b24793a14e92
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 60aca4ce8056ef0b8710f6a10ee29d205a6370f64f77337cc3c3e78d0f7e69a4
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 e1336dfbd1b06e491e99ed08ae1a5454f93b83709d96982c90dfa16cd4b1652a
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 1KB
                                                                                                                                                                              • SHA256 59763fe86ef295267cfc88cbc1283c12f8263054d8e62b5729128684b15d2f5c
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 389B
                                                                                                                                                                              • SHA256 4d1da00a30112702f49fa1e2ca6ed6025aef1d34482c142ff6c282abdec38c48
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              ssdfp10040.1.592183265
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp10040.1.592183265
                                                                                                                                                                              • Size 487B
                                                                                                                                                                              • SHA256 f0e24c426796effe6ee4871cc83e1109eaa23a44d66d15528728c8ed617d11f3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                              • Size 5KB
                                                                                                                                                                              • SHA256 94e658725d77fcde4c05651301ffa0e98841a8feac9bb1663d9bd9b27a8fd14c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                              • Size 3KB
                                                                                                                                                                              • SHA256 4f8ead4bbcda450c6e530f111f01fd51ddf85213d5adf7c34eaac93785ee3782
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                              • Size 5KB
                                                                                                                                                                              • SHA256 b80afd2a950ea6dfdf5053c9c6e0e802d9f263cb095ea25ae1931ca0bafb6389
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Local State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                              • Size 3KB
                                                                                                                                                                              • SHA256 2c9be68da7f0843a03014fd59dcde67beb6c6b316de2251e985349eb26267f42
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              VariationsSeedV2
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                                                              • Size 19B
                                                                                                                                                                              • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              VariationsSeedV2
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                                                              • Size 11B
                                                                                                                                                                              • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              metadata.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                              • Size 684B
                                                                                                                                                                              • SHA256 a7075c62c99444c6cee4f3cb1553e54492006d9e886158cd7c96b39411f515f9
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              metadata.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                              • Size 236B
                                                                                                                                                                              • SHA256 58026decf19f18450bb3b0dd26f9c8b6ec26dd4756c66697bdc80b70fd5d0735
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              metadata.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                              • Size 124B
                                                                                                                                                                              • SHA256 42dc5689279765d5204eae760cb625510863a8cec862a2375f042ad1b5819351
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              metadata.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                              • Size 348B
                                                                                                                                                                              • SHA256 c55345333e8f288368aa9ff15a1abd2904fb50975342a82895244ae77e9662a7
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              metadata.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                              • Size 572B
                                                                                                                                                                              • SHA256 2c64422307384927489f3b9a19dd4b6fd3f984c6fe04be6234886f8d3d755ad3
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              metadata.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                              • Size 460B
                                                                                                                                                                              • SHA256 ec26d650e00fb3e3eefdd823070108135191c8e549ba1d8ffafe57eb13b59ea0
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              index
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\bright-vpn\Code Cache\wasm\index
                                                                                                                                                                              • Size 24B
                                                                                                                                                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Network Persistent State
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\bright-vpn\Network\Network Persistent State
                                                                                                                                                                              • Size 300B
                                                                                                                                                                              • SHA256 da79313ea8fde1d395f62c9b234d1304fa01bbc88d89cd6423020883ea4b427d
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\bright-vpn\Preferences
                                                                                                                                                                              • Size 57B
                                                                                                                                                                              • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Preferences~RFe5de5a0.TMP
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\bright-vpn\Preferences~RFe5de5a0.TMP
                                                                                                                                                                              • Size 86B
                                                                                                                                                                              • SHA256 8029940de92ae596278912bbbd6387d65f4e849d3c136287a1233f525d189c67
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              config.json
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\bright-vpn\config.json
                                                                                                                                                                              • Size 68B
                                                                                                                                                                              • SHA256 b586ff987cb8935a43db50348eebdd59e966d6396a15dcec434fb8e843daa5e2
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              config.json.tmp-787642364096f670
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\bright-vpn\config.json.tmp-787642364096f670
                                                                                                                                                                              • Size 133B
                                                                                                                                                                              • SHA256 1dcef8e1cf4dc6b9fbea049c2b5b3dbebbcc8ee5040a872e2f2a016b80ac169f
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              config.json.tmp-7876423809b9df35
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\bright-vpn\config.json.tmp-7876423809b9df35
                                                                                                                                                                              • Size 98B
                                                                                                                                                                              • SHA256 16d5aa67dc834b9c34d1612ce9fc6ed5d3b7402a075f60077f07b188f6b10b58
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              config.json.tmp-7876423890bafd6a
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\bright-vpn\config.json.tmp-7876423890bafd6a
                                                                                                                                                                              • Size 126B
                                                                                                                                                                              • SHA256 41ba6f9a6d374c4f1ff6335ce873ba34c0d9ae71850efeaef1d5765973a98963
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              main.log
                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\bright-vpn\logs\main.log
                                                                                                                                                                              • Size 4KB
                                                                                                                                                                              • SHA256 4f8e1dfda9e986705ce80ea8463994ec9c9abd64a15c0968191fca57cc147999
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              MediaGet.exe.crdownload
                                                                                                                                                                              • Path C:\Users\Admin\Downloads\MediaGet.exe.crdownload
                                                                                                                                                                              • Size 3.1MB
                                                                                                                                                                              • SHA256 1ca62a560ee6885b9c9187ade5c8933ec28a52323ffbc39f8e2ba9c9fb151247
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Qt5WebEngineWidgets.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\Qt5WebEngineWidgets.dll
                                                                                                                                                                              • Size 198KB
                                                                                                                                                                              • SHA256 c93c46c5669dbea6c9959b16f384df8e2d34bc87cd7f8a4df04d79cf1311295c
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Qt5Widgets.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\Qt5Widgets.dll
                                                                                                                                                                              • Size 4.3MB
                                                                                                                                                                              • SHA256 600285754e7eee7239b9d252dbed5c9d2c9c4c432751b8953dcb2e8b45e0408a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              Qt5WinExtras.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\Qt5WinExtras.dll
                                                                                                                                                                              • Size 197KB
                                                                                                                                                                              • SHA256 3db3e1e9a3bda8302aa6f177591feca2e04dc9a336459a25f160c3105c9a03fb
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              avcodec-58.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\avcodec-58.dll
                                                                                                                                                                              • Size 5.4MB
                                                                                                                                                                              • SHA256 d3a72ea93dc6267b25b534b59e46aae4fc9f4d1a72fb46f3b9ec9f83052805c3
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              avformat-58.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\avformat-58.dll
                                                                                                                                                                              • Size 1.1MB
                                                                                                                                                                              • SHA256 93866a00bc5b8620663477979dabdce7856632a3f2e5a06127ca7ed6840f6af2
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              avutil-56.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\avutil-56.dll
                                                                                                                                                                              • Size 348KB
                                                                                                                                                                              • SHA256 de39459464d7c55b970dc1d251761a6e046ef78469d681a076217ee6f38749e2
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              libcrypto-1_1.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\libcrypto-1_1.dll
                                                                                                                                                                              • Size 2.4MB
                                                                                                                                                                              • SHA256 2e7c6aa4daea6e14d3d74e01a021a33e063cf60d34632e51b4730a2c3f0d46b3
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              libssl-1_1.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\libssl-1_1.dll
                                                                                                                                                                              • Size 518KB
                                                                                                                                                                              • SHA256 71b19452b5fd7a389cde0c588b21f3f03ee443f57a1e42a7670671988be908cf
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              libvlc.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\libvlc.dll
                                                                                                                                                                              • Size 172KB
                                                                                                                                                                              • SHA256 072d31910b2a1cd83341bb8270fd2eebd8ca5a6e01fa0c6339e0867f59d2f29e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              mediaget.exe
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\mediaget.exe
                                                                                                                                                                              • Size 11.9MB
                                                                                                                                                                              • SHA256 99d30aee262ff0226d9e166795663d8df98d8fd887b060126d3a6d805c22b3c6
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              msvcp140.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\msvcp140.dll
                                                                                                                                                                              • Size 438KB
                                                                                                                                                                              • SHA256 2db7fd3c9c3c4b67f2d50a5a50e8c69154dc859780dd487c28a4e6ed1af90d01
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              opencv_core320.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\opencv_core320.dll
                                                                                                                                                                              • Size 9.0MB
                                                                                                                                                                              • SHA256 8408eee588c65584aed60751999f230116959b913e4be9ef10e6ad165196b90e
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              opencv_img_hash320.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\opencv_img_hash320.dll
                                                                                                                                                                              • Size 182KB
                                                                                                                                                                              • SHA256 718630ee5693e13c3953d91399de34e6fe9ff81fd3323eccd22fc08c22a8b7aa
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              opencv_imgcodecs320.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\opencv_imgcodecs320.dll
                                                                                                                                                                              • Size 2.4MB
                                                                                                                                                                              • SHA256 3be4bdeadf9529fa251f090916801e8a3c12853f669208501399f81f10aa94f8
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              opencv_imgproc320.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\opencv_imgproc320.dll
                                                                                                                                                                              • Size 18.1MB
                                                                                                                                                                              • SHA256 651921413fadcf6cb7680e0d7c3c63fdc5723702489b4c8e3c10d15d99238cdf
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              opencv_videoio320.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\opencv_videoio320.dll
                                                                                                                                                                              • Size 246KB
                                                                                                                                                                              • SHA256 fa26aa96ab75b015e8ded448e8ba1f5e17a927eff2372da4e165c884b08f5b1a
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              sentry.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\sentry.dll
                                                                                                                                                                              • Size 375KB
                                                                                                                                                                              • SHA256 9288b5cbc3f1287a40adc794766abc74e5ff5edb8e271c075b39c596d6859a5d
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              swscale-5.dll
                                                                                                                                                                              • Path C:\Users\Admin\MediaGet2\swscale-5.dll
                                                                                                                                                                              • Size 403KB
                                                                                                                                                                              • SHA256 1dc9416d347788129e93a1b08e8483c461d877ea8603ac8394fa4e9519df2f6b
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              hyph-bn.hyb
                                                                                                                                                                              • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping10040_1452552615\hyph-bn.hyb
                                                                                                                                                                              • Size 703B
                                                                                                                                                                              • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              hyph-mr.hyb
                                                                                                                                                                              • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping10040_1452552615\hyph-mr.hyb
                                                                                                                                                                              • Size 687B
                                                                                                                                                                              • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              hyph-nn.hyb
                                                                                                                                                                              • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping10040_1452552615\hyph-nn.hyb
                                                                                                                                                                              • Size 141KB
                                                                                                                                                                              • SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                              Submit Download

                                                                                                                                                                              memory/828-1963-0x0000000006DD0000-0x0000000006E1C000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/1068-1882-0x0000000006990000-0x00000000069B2000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/1068-1883-0x0000000007BF0000-0x00000000081AA000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/1068-1462-0x0000000005E30000-0x0000000005E96000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/1068-1463-0x0000000005EA0000-0x0000000005F06000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/1068-1390-0x0000000002F00000-0x0000000002F36000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/1068-1880-0x0000000007590000-0x0000000007626000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/1068-1681-0x0000000005FD0000-0x0000000005FEE000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/1068-1461-0x0000000005700000-0x0000000005D4A000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/1068-1682-0x0000000006440000-0x000000000648C000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/1068-1881-0x0000000006940000-0x000000000695A000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2092-1371-0x000000000C660000-0x000000000C9BB000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2092-1237-0x0000000000C40000-0x0000000000EA2000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2092-1273-0x0000000006BC0000-0x0000000006BE2000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2092-1286-0x0000000006C00000-0x0000000006C08000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2092-1304-0x0000000006E00000-0x0000000006E3E000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2092-1305-0x0000000006DE0000-0x0000000006DEE000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3755-0x00000000707C0000-0x00000000707D4000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3746-0x0000000070D60000-0x0000000070D81000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1825-0x000000000C4B0000-0x000000000C4C0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1764-0x000000000B4D0000-0x000000000B4E0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1765-0x000000000B4C0000-0x000000000B4D0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1763-0x0000000009560000-0x0000000009570000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1762-0x00000000096F0000-0x0000000009700000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3758-0x000000005CD20000-0x000000005CD3E000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3743-0x000000005D530000-0x000000005D724000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3737-0x00000000721E0000-0x00000000721F4000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3757-0x000000005CE60000-0x000000005CE7F000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3756-0x00000000707B0000-0x00000000707BF000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-6663-0x000000005FF20000-0x000000005FF2E000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-6664-0x000000005D4A0000-0x000000005D4AF000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1826-0x000000000C4A0000-0x000000000C4B0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3754-0x00000000723D0000-0x00000000723DE000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-6665-0x000000005C7D0000-0x000000005C7DF000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-6666-0x000000005C850000-0x000000005C8E1000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-6667-0x000000005C830000-0x000000005C850000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3753-0x00000000707E0000-0x00000000707F4000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3752-0x0000000072440000-0x000000007244F000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3751-0x000000006FD60000-0x000000006FE1A000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-6668-0x000000005C760000-0x000000005C7CF000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-6670-0x000000005C820000-0x000000005C82F000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3750-0x0000000070AD0000-0x0000000070ADE000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1827-0x000000000E220000-0x000000000E230000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3749-0x0000000070D50000-0x0000000070D60000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1828-0x000000000E210000-0x000000000E220000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3370-0x000000006F640000-0x000000006F66F000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3748-0x0000000070AE0000-0x0000000070AF6000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3371-0x0000000071BD0000-0x0000000071BDF000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3373-0x0000000071B90000-0x0000000071BAD000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3747-0x0000000070210000-0x000000007029D000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3374-0x0000000072CA0000-0x0000000072CC7000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3376-0x0000000073870000-0x0000000073882000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1803-0x000000000F6C0000-0x000000000F6D0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3377-0x0000000072D10000-0x0000000072D1E000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1903-0x0000000011AA0000-0x0000000011AB0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3378-0x0000000071ED0000-0x0000000071F81000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3380-0x0000000071AA0000-0x0000000071B85000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1901-0x0000000010280000-0x0000000010290000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1900-0x000000000FBA0000-0x000000000FBB0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3381-0x0000000070800000-0x00000000708DF000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1829-0x000000000F7A0000-0x000000000F7B0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1899-0x000000000FBB0000-0x000000000FBC0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1830-0x000000000F790000-0x000000000F7A0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3379-0x000000006FAC0000-0x000000006FD38000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3383-0x0000000072C70000-0x0000000072C9C000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3375-0x00000000703B0000-0x0000000070742000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1933-0x000000000F3A0000-0x000000000F3B0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3745-0x0000000071A20000-0x0000000071A69000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3372-0x0000000071BB0000-0x0000000071BC7000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3382-0x0000000072CD0000-0x0000000072D0D000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1802-0x000000000F6D0000-0x000000000F6E0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1351-0x000000006F640000-0x000000006F66F000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1760-0x0000000006FA0000-0x0000000006FB0000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3744-0x000000006FE20000-0x000000006FEB1000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-1761-0x0000000004360000-0x0000000004370000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3742-0x0000000071A70000-0x0000000071A7E000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3741-0x0000000071EC0000-0x0000000071ECE000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3740-0x0000000071A80000-0x0000000071A96000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3739-0x0000000072180000-0x00000000721AA000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/2520-3738-0x00000000721B0000-0x00000000721D2000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/3220-3518-0x0000000011280000-0x0000000011394000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/4472-7357-0x00000000006E0000-0x00000000006E8000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/8332-8021-0x000002F86F8A0000-0x000002F8700E8000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/8332-8037-0x000002F86F050000-0x000002F86F87E000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/8332-8064-0x000002F870180000-0x000002F8701A2000-memory.dmp
                                                                                                                                                                              Download

                                                                                                                                                                              memory/8332-8471-0x000002F870830000-0x000002F870D58000-memory.dmp
                                                                                                                                                                              Download