Overview

overview

9

Static

static

1

URLScan

urlscan

1

https://yabs.yandex....

windows10-ltsc_2021-x64

9

Analysis

  • geolocation tags

    asiadelhiinindia
  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    900s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    31/08/2026, 12:12

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://yabs.yandex.ru/count/WeOejI_zOoVX2Ldj0SKJ09CbaL1dz4uXXTeeLAJeWQBeWMuG00b71dIi1Cm9LF662UXDm2Q5JWXuFG9w2I2qqETpkRDd-vqxt_Mry_KxNc-umrMo5esm4b5bN8kk8ug4Q1GjNMkb6JA4YkeRrAeGqjM07J1bSmCORK-K651w4oISqS9i67GSxtWy31NGX2uW_06I0hXNA2C5QAzGTmLehLV82j1QhumLeBLU4LA0rdf5h02jzKfO0Lhh5R02j5OeJGLehL2O2j1QeUW5QAs2vmAqC5sef7A-9i8NtZ3a362OqrtQCllbFaD9LnpK815u8B1MPt2mGrk9NbNqjDfklDaT271mqpYVRvXil1biTky4S0CummRkyueJiCCfIC2uGAs6lGcuasarR9jD0d1ffvgo9vFIbrKZzlgkr-WSobyz9MTS8MqqN4-pRSDX-41Q3Ga1V5cXC0MmxS5gjKLWpjGGpI0lc27GGeU7PEikhC_2rWIS3bYNZIqQ5dRGLnNADrV05CnD7c4AMqz1XvbGjl0MPXL3Ze7IiM0c7Ql7Y7sCxc7CAXmWV7IXPO84cAwEMnUBvEfoKoz3avkXkVlVw0k5_72JCUo3h-F_3U9-Rn3tSs_u-Flowl5hbr1-Fxk4ycEQA-nrCSiLzhgOO-RIw-i0gSeuYtbYz8wpc0T6Rvc1lkpjgWI-UR8NN-4IwCUq1oCmP5BEqNy38DLL9T9lQLtN9wMwgaHwhK-oXNXkuhFUwxvA8TTNHv37Gy8ZUe4hn5ofL2f3y67aPDDNbBzcXAqnr1aD1W8E_1yShwlN-W9rqmw3RSzWfIixxLq24ia0qW1bSpF0oA8pc65puDMDqgB8tgkiCXKo~2?etext=&from=&q=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D1%84%D0%BD%D0%B0%D1%84+10+%D0%BD%D0%B0+%D0%BF%D0%BA
  • Sample260831-pc8yystxcx
Score
9/10
adwarebootkitdefense_evasiondiscoveryevasionexecutioninstallerpersistenceprivilege_escalationransomwarespywarestealertrojan

Malware Config

Signatures

  • Modifies boot configuration data using bcdedit 1 TTPs 2 IoCs
    ransomwareevasion
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 6 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 10 IoCs
  • Drops file in Drivers directory 10 IoCs
  • Sets service image path in registry 3 TTPs 14 IoCs

    This determines the executable launched when a service starts. It can be used to establish persistence.

    persistence
  • Checks computer location settings 2 TTPs 61 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies system executable filetype association 2 TTPs 2 IoCs
    persistence
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Unexpected DNS network traffic destination 12 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Adds Run key to start application 2 TTPs 5 IoCs
    persistence
  • Badlisted process makes network request 1 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Checks for any installed AV software in registry 1 TTPs 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 5 IoCs
    defense_evasiontrojan
  • Enumerates connected drives 3 TTPs 52 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 2 IoCs

    Attempt to gather information on host's network.

    discovery
  • Writes to the Master Boot Record (MBR) 1 TTPs 15 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • Checks system information in the registry 2 TTPs 1 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in System32 directory 13 IoCs
  • Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

    Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Modifies trusted root certificate store through registry 1 TTPs 25 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion
  • System Location Discovery: System Language Discovery 1 TTPs 59 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 14 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

    installer
  • Checks processor information in registry 2 TTPs 22 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 57 IoCs
    adwarespyware
  • Modifies Internet Explorer start page 1 TTPs 1 IoCs
    stealer
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 64 IoCs
    defense_evasionspywaretrojan
  • Runs ping.exe 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 24 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 54 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 53 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SendNotifyMessage
    PID:3364
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://yabs.yandex.ru/count/WeOejI_zOoVX2Ldj0SKJ09CbaL1dz4uXXTeeLAJeWQBeWMuG00b71dIi1Cm9LF662UXDm2Q5JWXuFG9w2I2qqETpkRDd-vqxt_Mry_KxNc-umrMo5esm4b5bN8kk8ug4Q1GjNMkb6JA4YkeRrAeGqjM07J1bSmCORK-K651w4oISqS9i67GSxtWy31NGX2uW_06I0hXNA2C5QAzGTmLehLV82j1QhumLeBLU4LA0rdf5h02jzKfO0Lhh5R02j5OeJGLehL2O2j1QeUW5QAs2vmAqC5sef7A-9i8NtZ3a362OqrtQCllbFaD9LnpK815u8B1MPt2mGrk9NbNqjDfklDaT271mqpYVRvXil1biTky4S0CummRkyueJiCCfIC2uGAs6lGcuasarR9jD0d1ffvgo9vFIbrKZzlgkr-WSobyz9MTS8MqqN4-pRSDX-41Q3Ga1V5cXC0MmxS5gjKLWpjGGpI0lc27GGeU7PEikhC_2rWIS3bYNZIqQ5dRGLnNADrV05CnD7c4AMqz1XvbGjl0MPXL3Ze7IiM0c7Ql7Y7sCxc7CAXmWV7IXPO84cAwEMnUBvEfoKoz3avkXkVlVw0k5_72JCUo3h-F_3U9-Rn3tSs_u-Flowl5hbr1-Fxk4ycEQA-nrCSiLzhgOO-RIw-i0gSeuYtbYz8wpc0T6Rvc1lkpjgWI-UR8NN-4IwCUq1oCmP5BEqNy38DLL9T9lQLtN9wMwgaHwhK-oXNXkuhFUwxvA8TTNHv37Gy8ZUe4hn5ofL2f3y67aPDDNbBzcXAqnr1aD1W8E_1yShwlN-W9rqmw3RSzWfIixxLq24ia0qW1bSpF0oA8pc65puDMDqgB8tgkiCXKo~2?etext=&from=&q=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D1%84%D0%BD%D0%B0%D1%84+10+%D0%BD%D0%B0+%D0%BF%D0%BA
      2⤵
      • Checks processor information in registry
      • Modifies data under HKEY_USERS
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4496
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x220,0x224,0x228,0x21c,0x22c,0x7ffc5d0ac728,0x7ffc5d0ac734,0x7ffc5d0ac740
        3⤵
          PID:3540
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1808,i,8406142758318055239,10613548913308047740,262144 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2060 /prefetch:2
          3⤵
            PID:2344
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1608,i,11830570383989597572,6992377488327571140,524288 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2248 /prefetch:3
            3⤵
            • Downloads MZ/PE file
            • System Time Discovery
            PID:3096
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2356,i,4021048800867904354,11153009338344691231,524288 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2536 /prefetch:8
            3⤵
              PID:700
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3224,i,11656964212578615289,13806798856818366596,2097152 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3228 /prefetch:1
              3⤵
                PID:792
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,1338219708026515882,13117145249966903602,2097152 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
                3⤵
                  PID:2352
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4416,i,7415369195309450536,13416006094863239985,2097152 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4412 /prefetch:2
                  3⤵
                    PID:5108
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4440,i,14688805395740320798,22861391909919158,2097152 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4724 /prefetch:1
                    3⤵
                      PID:3868
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5148,i,12162140374000330167,17018648436718280683,2097152 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5164 /prefetch:1
                      3⤵
                        PID:4892
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5828,i,13966981695978601625,7194010931873321074,524288 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5836 /prefetch:8
                        3⤵
                          PID:1560
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4652,i,16808807005342859079,5451771010272298503,524288 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:8
                          3⤵
                            PID:32
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4664,i,4802308449291207722,1891571202517058073,524288 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6120 /prefetch:8
                            3⤵
                              PID:224
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3412,i,12293178940242088682,2812699282185082465,524288 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4784 /prefetch:8
                              3⤵
                                PID:236
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5848,i,18155276172206886446,10799532034215904683,2097152 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5920 /prefetch:1
                                3⤵
                                  PID:2472
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4680,i,8650707778847670993,10562752246151487481,2097152 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4832 /prefetch:1
                                  3⤵
                                    PID:1656
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4740,i,202687124856942229,7541061453952633458,524288 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4792 /prefetch:8
                                    3⤵
                                      PID:4940
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6180,i,6587621446231731422,13451847511275798007,524288 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6200 /prefetch:8
                                      3⤵
                                        PID:4556
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6188,i,3216194206887037992,17121478919919898424,2097152 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6216 /prefetch:1
                                        3⤵
                                          PID:2300
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5144,i,18349900386786534835,14367391187752515873,2097152 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4476 /prefetch:1
                                          3⤵
                                            PID:4212
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5156,i,3047151473143703116,8438504962299602996,2097152 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5208 /prefetch:1
                                            3⤵
                                              PID:4156
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6404,i,5942671827695404422,7268285989919388790,524288 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6396 /prefetch:8
                                              3⤵
                                                PID:3000
                                              • C:\Users\Admin\Downloads\FF01_Game set updown free.exe
                                                "C:\Users\Admin\Downloads\FF01_Game set updown free.exe"
                                                3⤵
                                                • Executes dropped EXE
                                                • System Location Discovery: System Language Discovery
                                                • Suspicious use of WriteProcessMemory
                                                PID:4552
                                                • C:\Users\Admin\AppData\Local\Temp\is-SWBEWJNG21.tmp\FF01_Game set updown free.tmp
                                                  "C:\Users\Admin\AppData\Local\Temp\is-SWBEWJNG21.tmp\FF01_Game set updown free.tmp" /SL5="$F0294,154207748,1001472,C:\Users\Admin\Downloads\FF01_Game set updown free.exe"
                                                  4⤵
                                                  • Downloads MZ/PE file
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  • System Location Discovery: System Language Discovery
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:4044
                                                  • C:\Users\Admin\AppData\Local\Temp\is-TQP3MYM1TF.tmp\b1f019abfb569686930bbaf6540355b6.exe
                                                    "C:\Users\Admin\AppData\Local\Temp\is-TQP3MYM1TF.tmp\b1f019abfb569686930bbaf6540355b6.exe" /S
                                                    5⤵
                                                    • Downloads MZ/PE file
                                                    • Checks computer location settings
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Writes to the Master Boot Record (MBR)
                                                    • System Location Discovery: System Language Discovery
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:4824
                                                    • C:\Users\Admin\AppData\Local\Temp\is-TQP3MYM1TF.tmp\360TS_Setup.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\is-TQP3MYM1TF.tmp\360TS_Setup.exe" /c:RU.Omgm.CPI20220402 /pmode:2 /s /promo:eyJib290dGltZSI6IjciLCJtZWRhbCI6IjciLCJuZXdzIjoiMCIsIm9wZXJhIjoiNyIsIm9wZXJhX2lucyI6IjAiLCJwb3B1cCI6IjciLCJyZW1pbmRlciI6IjciLCJ1cGdyYWRlX25vdyI6IjAifQo=
                                                      6⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • System Location Discovery: System Language Discovery
                                                      PID:2220
                                                      • C:\Program Files (x86)\1788178582_0\360TS_Setup.exe
                                                        "C:\Program Files (x86)\1788178582_0\360TS_Setup.exe" /c:RU.Omgm.CPI20220402 /pmode:2 /s /promo:eyJib290dGltZSI6IjciLCJtZWRhbCI6IjciLCJuZXdzIjoiMCIsIm9wZXJhIjoiNyIsIm9wZXJhX2lucyI6IjAiLCJwb3B1cCI6IjciLCJyZW1pbmRlciI6IjciLCJ1cGdyYWRlX25vdyI6IjAifQo= /TSinstall
                                                        7⤵
                                                        • Drops file in Drivers directory
                                                        • Sets service image path in registry
                                                        • Checks computer location settings
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Adds Run key to start application
                                                        • Checks for any installed AV software in registry
                                                        • Checks whether UAC is enabled
                                                        • Writes to the Master Boot Record (MBR)
                                                        • Drops file in Program Files directory
                                                        • Modifies trusted root certificate store through registry
                                                        • System Location Discovery: System Language Discovery
                                                        • Checks processor information in registry
                                                        • Modifies registry class
                                                        • Modifies system certificate store
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        PID:5336
                                                        • C:\Windows\system32\bcdedit.exe
                                                          "C:\Windows\system32\bcdedit.exe" /set {bootmgr} flightsigning on
                                                          8⤵
                                                          • Modifies boot configuration data using bcdedit
                                                          PID:5464
                                                        • C:\Windows\system32\bcdedit.exe
                                                          "C:\Windows\system32\bcdedit.exe" /set flightsigning on
                                                          8⤵
                                                          • Modifies boot configuration data using bcdedit
                                                          PID:5752
                                                        • C:\Windows\SysWOW64\regsvr32.exe
                                                          "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\360\Total Security\MenuEx64.dll"
                                                          8⤵
                                                          • System Location Discovery: System Language Discovery
                                                          PID:1352
                                                          • C:\Windows\system32\regsvr32.exe
                                                            /s "C:\Program Files (x86)\360\Total Security\MenuEx64.dll"
                                                            9⤵
                                                            • Modifies system executable filetype association
                                                            • Modifies registry class
                                                            PID:8096
                                                        • C:\Program Files (x86)\360\Total Security\Utils\PowerSaver.exe
                                                          "C:\Program Files (x86)\360\Total Security\Utils\PowerSaver.exe" /flightsigning
                                                          8⤵
                                                          • Executes dropped EXE
                                                          • Modifies trusted root certificate store through registry
                                                          • System Location Discovery: System Language Discovery
                                                          PID:872
                                                        • C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe
                                                          "C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe" /installsrv
                                                          8⤵
                                                          • Executes dropped EXE
                                                          • System Location Discovery: System Language Discovery
                                                          PID:6580
                                                        • C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
                                                          "C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe" /install
                                                          8⤵
                                                          • Drops file in Drivers directory
                                                          • Sets service image path in registry
                                                          • Executes dropped EXE
                                                          • System Location Discovery: System Language Discovery
                                                          PID:5096
                                                        • C:\Program Files (x86)\360\Total Security\modules\KB931125-rootsupd.exe
                                                          "C:\Program Files (x86)\360\Total Security\modules\KB931125-rootsupd.exe"
                                                          8⤵
                                                          • Boot or Logon Autostart Execution: Active Setup
                                                          • System Location Discovery: System Language Discovery
                                                          PID:5460
                                                          • C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe
                                                            C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe authroots.sst
                                                            9⤵
                                                            • System Location Discovery: System Language Discovery
                                                            • Modifies system certificate store
                                                            PID:6552
                                                          • C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe
                                                            C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe updroots.sst
                                                            9⤵
                                                            • System Location Discovery: System Language Discovery
                                                            • Modifies system certificate store
                                                            PID:8564
                                                          • C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe
                                                            C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe -l roots.sst
                                                            9⤵
                                                            • Modifies trusted root certificate store through registry
                                                            • System Location Discovery: System Language Discovery
                                                            • Modifies system certificate store
                                                            PID:1524
                                                          • C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe
                                                            C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe -d delroots.sst
                                                            9⤵
                                                            • System Location Discovery: System Language Discovery
                                                            PID:4720
                                                  • C:\Users\Admin\AppData\Local\Temp\is-TQP3MYM1TF.tmp\7654b78192938f446f1dbd6f0b83d907.exe
                                                    "C:\Users\Admin\AppData\Local\Temp\is-TQP3MYM1TF.tmp\7654b78192938f446f1dbd6f0b83d907.exe" --silent --allusers=0
                                                    5⤵
                                                    • Executes dropped EXE
                                                    • System Location Discovery: System Language Discovery
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:2416
                                                    • C:\Users\Admin\AppData\Local\Temp\7zS07911E3A\installer.exe
                                                      C:\Users\Admin\AppData\Local\Temp\7zS07911E3A\installer.exe --silent --allusers=0 --server-tracking-blob=NWUwMTUwZWQ5YzhmM2JmM2ExY2U5NzcxNmFhNDRlZTRhYmQxZTcxMTFlYjA3M2IxYzUzZjI4MmEzMjMxMDk4ZDp7ImNvdW50cnkiOiJJTiIsImVkaXRpb24iOiJZeCBHWCIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOiJvcGVyYV9neCIsInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS93aW5kb3dzP2VkaXRpb249WXglMjBHWCZ1dG1fc291cmNlPU9NR00mdXRtX21lZGl1bT1wYiZ1dG1fY2FtcGFpZ249R1QiLCJ0aW1lc3RhbXAiOiIxNzg4MTc4NDYyLjM3MjciLCJ1c2VyYWdlbnQiOiJJbm5vIFNldHVwIDYuNy4xIiwidXRtIjp7ImNhbXBhaWduIjoiR1QiLCJtZWRpdW0iOiJwYiIsInNvdXJjZSI6Ik9NR00ifSwidXVpZCI6IjkxYjRjYWZjLWVjZWQtNDI0ZC1iYTdlLTA3ZjAyOGQ2NjJjMSJ9
                                                      6⤵
                                                      • Downloads MZ/PE file
                                                      • Executes dropped EXE
                                                      • Enumerates connected drives
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:2388
                                                      • C:\Users\Admin\AppData\Local\Temp\7zS07911E3A\installer.exe
                                                        C:\Users\Admin\AppData\Local\Temp\7zS07911E3A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.57 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff7b7391608,0x7ff7b7391618,0x7ff7b7391628
                                                        7⤵
                                                        • Executes dropped EXE
                                                        PID:5060
                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\installer.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\installer.exe" --version
                                                        7⤵
                                                        • Executes dropped EXE
                                                        PID:3684
                                                      • C:\Users\Admin\AppData\Local\Temp\7zS07911E3A\installer.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\7zS07911E3A\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=2388 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_20260831174444" --session-guid=893f34a5-7bac-473d-beab-14bc9de994fc --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=F007000000000000
                                                        7⤵
                                                        • Executes dropped EXE
                                                        • Enumerates connected drives
                                                        • Enumerates system info in registry
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:4188
                                                        • C:\Users\Admin\AppData\Local\Temp\7zS07911E3A\installer.exe
                                                          C:\Users\Admin\AppData\Local\Temp\7zS07911E3A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.57 --initial-client-data=0x2a4,0x2a8,0x2ac,0x274,0x2b0,0x7ff7b7391608,0x7ff7b7391618,0x7ff7b7391628
                                                          8⤵
                                                          • Executes dropped EXE
                                                          PID:2904
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe" --backend --initial-pid=2388 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442" --session-guid=893f34a5-7bac-473d-beab-14bc9de994fc --server-tracking-blob=YzA5YmUwNzk4ODllOTExYjcwYTc1YWY2OGRlMzI5ZjdmYzkzYWM4MDM5YTZhZTNkY2Y3NjM5NGQ2NTgzYWU0MTp7ImNvdW50cnkiOiJJTiIsImVkaXRpb24iOiJZeCBHWCIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS93aW5kb3dzP2VkaXRpb249WXglMjBHWCZ1dG1fc291cmNlPU9NR00mdXRtX21lZGl1bT1wYiZ1dG1fY2FtcGFpZ249R1QiLCJzeXN0ZW0iOnsicGxhdGZvcm0iOnsiYXJjaCI6Ing4Nl82NCIsIm9wc3lzIjoiV2luZG93cyIsIm9wc3lzLXZlcnNpb24iOiIxMCIsInBhY2thZ2UiOiJFWEUifX0sInRpbWVzdGFtcCI6IjE3ODgxNzg0NjIuMzcyNyIsInVzZXJhZ2VudCI6Iklubm8gU2V0dXAgNi43LjEiLCJ1dG0iOnsiY2FtcGFpZ24iOiJHVCIsIm1lZGl1bSI6InBiIiwic291cmNlIjoiT01HTSJ9LCJ1dWlkIjoiOTFiNGNhZmMtZWNlZC00MjRkLWJhN2UtMDdmMDI4ZDY2MmMxIn0= --silent --desktopshortcut=1 --install-subfolder=134.0.5954.67
                                                          8⤵
                                                          • Executes dropped EXE
                                                          • Enumerates connected drives
                                                          • Modifies registry class
                                                          • Suspicious use of SetWindowsHookEx
                                                          PID:1192
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff6eb2dbd88,0x7ff6eb2dbd94,0x7ff6eb2dbda0
                                                            9⤵
                                                            • Executes dropped EXE
                                                            PID:2248
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\assistant\assistant_installer.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                                                            9⤵
                                                            • Executes dropped EXE
                                                            • Adds Run key to start application
                                                            • System Location Discovery: System Language Discovery
                                                            • Enumerates system info in registry
                                                            • Modifies Internet Explorer settings
                                                            PID:6564
                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\assistant\assistant_installer.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x264,0x268,0x26c,0x240,0x270,0xb6cb80,0xb6cb8c,0xb6cb98
                                                              10⤵
                                                              • Executes dropped EXE
                                                              • System Location Discovery: System Language Discovery
                                                              PID:6348
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                                                              10⤵
                                                              • Executes dropped EXE
                                                              • System Location Discovery: System Language Discovery
                                                              PID:6324
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x260,0x264,0x268,0x23c,0x26c,0xc8cb80,0xc8cb8c,0xc8cb98
                                                                11⤵
                                                                • Executes dropped EXE
                                                                • System Location Discovery: System Language Discovery
                                                                PID:7384
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                                                11⤵
                                                                • Executes dropped EXE
                                                                • System Location Discovery: System Language Discovery
                                                                PID:2476
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                  12⤵
                                                                  • Executes dropped EXE
                                                                  • Enumerates system info in registry
                                                                  PID:2612
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x19c,0x1a0,0x198,0x168,0x194,0x7ffc391d5310,0x7ffc391d5320,0x7ffc391d5330
                                                                    13⤵
                                                                    • Executes dropped EXE
                                                                    PID:4792
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                  12⤵
                                                                  • Executes dropped EXE
                                                                  • Enumerates system info in registry
                                                                  PID:7228
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x158,0x150,0x15c,0x154,0x160,0x7ffc391d5310,0x7ffc391d5320,0x7ffc391d5330
                                                                    13⤵
                                                                    • Executes dropped EXE
                                                                    PID:7420
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x284,0x288,0x28c,0x244,0x290,0x133e2bc,0x133e2c8,0x133e2d4
                                                                  12⤵
                                                                  • Executes dropped EXE
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:7552
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                    13⤵
                                                                    • Executes dropped EXE
                                                                    PID:7580
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x19c,0x1a0,0x198,0x168,0x194,0x7ffc391d5310,0x7ffc391d5320,0x7ffc391d5330
                                                                      14⤵
                                                                      • Executes dropped EXE
                                                                      PID:7608
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                    13⤵
                                                                    • Executes dropped EXE
                                                                    • Enumerates system info in registry
                                                                    PID:7712
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x19c,0x1a0,0x198,0x168,0x194,0x7ffc391d5310,0x7ffc391d5320,0x7ffc391d5330
                                                                      14⤵
                                                                      • Executes dropped EXE
                                                                      PID:7768
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                    13⤵
                                                                    • Enumerates system info in registry
                                                                    PID:7904
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x19c,0x1a0,0x198,0x168,0x194,0x7ffc391d5310,0x7ffc391d5320,0x7ffc391d5330
                                                                      14⤵
                                                                        PID:7920
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                                              9⤵
                                                              • Checks computer location settings
                                                              • Adds Run key to start application
                                                              • Checks for any installed AV software in registry
                                                              • Drops file in Windows directory
                                                              • Checks processor information in registry
                                                              • Enumerates system info in registry
                                                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                              PID:8528
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x1a0,0x1a4,0x19c,0x16c,0x198,0x7ffc391d5310,0x7ffc391d5320,0x7ffc391d5330
                                                                10⤵
                                                                  PID:8544
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1644,i,15728670952466697732,9094273846061670043,262144 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1904 /prefetch:2
                                                                  10⤵
                                                                  • Enumerates system info in registry
                                                                  PID:9084
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=2152,i,18409279690951877247,15630692151469499263,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2164 /prefetch:3
                                                                  10⤵
                                                                  • System Time Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:5752
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=2432,i,17519420176480565570,1828102172381781746,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2608 /prefetch:8
                                                                  10⤵
                                                                    PID:9172
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=3108,i,11486276157475321854,8634252312145863868,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3152 /prefetch:8
                                                                    10⤵
                                                                      PID:6032
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=3124,i,17044775245120395292,11848929418822404974,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3164 /prefetch:8
                                                                      10⤵
                                                                      • Enumerates system info in registry
                                                                      PID:5992
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=3136,i,16467890784793459417,7895079283612542655,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3184 /prefetch:8
                                                                      10⤵
                                                                        PID:2596
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3268,i,15171889289597228645,2442739487862943349,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3560 /prefetch:1
                                                                        10⤵
                                                                        • Checks computer location settings
                                                                        PID:6456
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_gx_splash.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                                        10⤵
                                                                          PID:8356
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4284,i,8689370494771336538,8205552566872768696,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4296 /prefetch:1
                                                                          10⤵
                                                                          • Checks computer location settings
                                                                          PID:8648
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4468,i,11811551097401585702,8653282346822248561,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4524 /prefetch:2
                                                                          10⤵
                                                                          • Checks computer location settings
                                                                          • Enumerates system info in registry
                                                                          PID:8500
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4552,i,18176608284201627907,17813811345520468762,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4672 /prefetch:1
                                                                          10⤵
                                                                          • Checks computer location settings
                                                                          PID:6604
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4800,i,10497631888170388353,8252925289667920212,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4816 /prefetch:1
                                                                          10⤵
                                                                          • Checks computer location settings
                                                                          PID:7328
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=4472,i,10434115798901634109,4589374654498933599,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=3868 /prefetch:8
                                                                          10⤵
                                                                          • Enumerates system info in registry
                                                                          PID:5272
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=4932,i,17968270263100314496,3692324967627263619,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5032 /prefetch:8
                                                                          10⤵
                                                                            PID:3828
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=4936,i,9008549930641570386,5881277601450116590,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5040 /prefetch:8
                                                                            10⤵
                                                                            • Enumerates system info in registry
                                                                            PID:2588
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=4940,i,9006114434450576108,4752447079647388652,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5056 /prefetch:8
                                                                            10⤵
                                                                              PID:1416
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5380,i,17726850492918392339,3705764844395430274,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5356 /prefetch:2
                                                                              10⤵
                                                                              • Checks computer location settings
                                                                              • Enumerates system info in registry
                                                                              PID:1000
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5792,i,12788803976170664177,5927500344258747323,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=5788 /prefetch:2
                                                                              10⤵
                                                                              • Checks computer location settings
                                                                              PID:1860
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5704,i,1873105712249761318,10165833879067903286,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=6276 /prefetch:1
                                                                              10⤵
                                                                              • Checks computer location settings
                                                                              PID:5308
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6468,i,5146884266644260974,14490885266950916470,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6484 /prefetch:2
                                                                              10⤵
                                                                              • Checks computer location settings
                                                                              PID:6592
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=5676,i,11314890346432557885,4407406197068223530,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6696 /prefetch:8
                                                                              10⤵
                                                                              • Enumerates system info in registry
                                                                              PID:7564
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7016,i,15176918481312453809,16875467229325603453,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7064 /prefetch:8
                                                                              10⤵
                                                                              • Enumerates system info in registry
                                                                              PID:6180
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7040,i,14405816954339114735,1615336769643089182,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7100 /prefetch:8
                                                                              10⤵
                                                                              • Enumerates system info in registry
                                                                              PID:2232
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7052,i,13986340116019274980,13794468203921525616,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7120 /prefetch:8
                                                                              10⤵
                                                                              • Enumerates system info in registry
                                                                              PID:8524
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7028,i,15878062673298174763,12841341369383905979,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7084 /prefetch:8
                                                                              10⤵
                                                                                PID:8824
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7476,i,2178816159019404227,4612252632436517125,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7596 /prefetch:8
                                                                                10⤵
                                                                                • Enumerates system info in registry
                                                                                PID:7132
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7604,i,6610968292224744497,11552290930254438806,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7632 /prefetch:8
                                                                                10⤵
                                                                                • Enumerates system info in registry
                                                                                PID:6384
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7612,i,6548754954394302848,8074976201231943803,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7992 /prefetch:8
                                                                                10⤵
                                                                                  PID:6064
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7980,i,9058072446895817444,4756894376058594547,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8016 /prefetch:8
                                                                                  10⤵
                                                                                    PID:1292
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=8268,i,15725818968134189765,15793317097468803594,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8280 /prefetch:8
                                                                                    10⤵
                                                                                      PID:1564
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=8680,i,1190884554412173129,2405903773108774732,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8692 /prefetch:8
                                                                                      10⤵
                                                                                        PID:5004
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=8700,i,7281408121052300073,5081162488140793685,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8828 /prefetch:8
                                                                                        10⤵
                                                                                          PID:5916
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                                                          10⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:8300
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff65b5538d0,0x7ff65b5538dc,0x7ff65b5538e8
                                                                                            11⤵
                                                                                              PID:8516
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=8992,i,6973798795148208480,18102076540745747301,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9048 /prefetch:8
                                                                                            10⤵
                                                                                              PID:8312
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=8836,i,6004867196697071176,2870618623169596205,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9016 /prefetch:8
                                                                                              10⤵
                                                                                              • Enumerates system info in registry
                                                                                              PID:3276
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9024,i,3559297165460573847,17196574126426702713,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9056 /prefetch:8
                                                                                              10⤵
                                                                                                PID:2412
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9444,i,3544998944284370685,6804017570430250969,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9472 /prefetch:8
                                                                                                10⤵
                                                                                                  PID:9112
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9716,i,16878110070527602964,8087326270748639477,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9732 /prefetch:8
                                                                                                  10⤵
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:1452
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9744,i,10837789994066042913,14198122360929674011,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9892 /prefetch:8
                                                                                                  10⤵
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:5024
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=10028,i,15976778992814527873,13572980090597043361,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10032 /prefetch:8
                                                                                                  10⤵
                                                                                                    PID:2044
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe" --fix-taskbar-pins
                                                                                                    10⤵
                                                                                                      PID:6492
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x294,0x298,0x29c,0x268,0x2a0,0x7ff6eb2dbd88,0x7ff6eb2dbd94,0x7ff6eb2dbda0
                                                                                                        11⤵
                                                                                                          PID:3488
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=3140,i,16771122654220074662,16238757717758937787,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=5080 /prefetch:2
                                                                                                        10⤵
                                                                                                        • Checks computer location settings
                                                                                                        PID:3624
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9092,i,7646855721054165405,13586367794424581137,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=9020 /prefetch:8
                                                                                                        10⤵
                                                                                                          PID:6000
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9868,i,18252458962462105463,17480421146405350566,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9724 /prefetch:8
                                                                                                          10⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:7476
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=7032,i,459931079288713626,13408785166297393366,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=5232 /prefetch:1
                                                                                                          10⤵
                                                                                                          • Checks computer location settings
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:5836
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=3644,i,11179243304180453929,4286753095859483955,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=5428 /prefetch:8
                                                                                                          10⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:9984
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7752,i,11827354377233546488,13757100877315718032,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=7472 /prefetch:8
                                                                                                          10⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:10040
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7808,i,314129097517237378,10293608345157254564,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=7640 /prefetch:8
                                                                                                          10⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:10180
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7712,i,1276374204893541361,5344631595659159699,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=7740 /prefetch:8
                                                                                                          10⤵
                                                                                                            PID:8264
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9432,i,153938570521089863,6466982393374541436,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=6296 /prefetch:8
                                                                                                            10⤵
                                                                                                              PID:9268
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9440,i,566121520411731853,14066908396276813938,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=9312 /prefetch:8
                                                                                                              10⤵
                                                                                                                PID:9344
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=8260,i,618319968970432988,4259055353054006600,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=6000 /prefetch:8
                                                                                                                10⤵
                                                                                                                  PID:9396
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=8796,i,1626067596823212404,17425701070537184173,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=8816 /prefetch:8
                                                                                                                  10⤵
                                                                                                                  • Enumerates system info in registry
                                                                                                                  PID:9988
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=8732,i,17181948927907389780,2052656446093745243,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=9960 /prefetch:8
                                                                                                                  10⤵
                                                                                                                    PID:10152
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=8760,i,9459101443073029838,5470957834339051518,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=5964 /prefetch:8
                                                                                                                    10⤵
                                                                                                                    • Enumerates system info in registry
                                                                                                                    PID:10108
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9092,i,9312223128341250022,16479101960189717578,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=9052 /prefetch:8
                                                                                                                    10⤵
                                                                                                                    • Enumerates system info in registry
                                                                                                                    PID:9532
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=3672,i,7434718922027775799,3320495722678381228,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=5972 /prefetch:8
                                                                                                                    10⤵
                                                                                                                      PID:9328
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=5428,i,11198164721589383847,4952136542660344802,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=3604 /prefetch:8
                                                                                                                      10⤵
                                                                                                                      • Enumerates system info in registry
                                                                                                                      PID:4208
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=3456,i,803786863041191551,7706912812994700160,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=9608 /prefetch:8
                                                                                                                      10⤵
                                                                                                                      • Enumerates system info in registry
                                                                                                                      PID:10124
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=3396,i,8758744572292817358,3888179768802132194,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=3416 /prefetch:2
                                                                                                                      10⤵
                                                                                                                      • Checks computer location settings
                                                                                                                      • Enumerates system info in registry
                                                                                                                      PID:9640
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=5632,i,12898555610419616847,18104689047957979187,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8736 /prefetch:2
                                                                                                                      10⤵
                                                                                                                      • Checks computer location settings
                                                                                                                      PID:1496
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=8248,i,12955845514191244653,189189700799313532,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=7536 /prefetch:2
                                                                                                                      10⤵
                                                                                                                      • Checks computer location settings
                                                                                                                      • Enumerates system info in registry
                                                                                                                      PID:10180
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=9876,i,2992897528260144488,11253338653460422058,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=5940 /prefetch:2
                                                                                                                      10⤵
                                                                                                                      • Checks computer location settings
                                                                                                                      PID:7980
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=3420,i,2801209750046731800,11930711710852449744,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=9592 /prefetch:2
                                                                                                                      10⤵
                                                                                                                      • Checks computer location settings
                                                                                                                      • Enumerates system info in registry
                                                                                                                      PID:9332
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9428,i,6479316773645575183,11894527120242851635,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=5620 /prefetch:8
                                                                                                                      10⤵
                                                                                                                      • Enumerates system info in registry
                                                                                                                      PID:9500
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=9864,i,17384791804670003370,8025813842148238871,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=9820 /prefetch:2
                                                                                                                      10⤵
                                                                                                                      • Checks computer location settings
                                                                                                                      • Enumerates system info in registry
                                                                                                                      PID:10072
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=8908,i,14256189910842995015,13293792461126781235,262144 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8920 /prefetch:8
                                                                                                                      10⤵
                                                                                                                      • Enumerates system info in registry
                                                                                                                      PID:9544
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7748,i,6355422564736708854,623761008662032561,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=7692 /prefetch:8
                                                                                                                      10⤵
                                                                                                                      • Enumerates system info in registry
                                                                                                                      PID:10944
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=6680,i,5356639425965542974,15937652680799265143,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=5160 /prefetch:2
                                                                                                                      10⤵
                                                                                                                      • Checks computer location settings
                                                                                                                      • Enumerates system info in registry
                                                                                                                      PID:3844
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=7600,i,8628384522916111453,4797400782197253467,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=4664 /prefetch:2
                                                                                                                      10⤵
                                                                                                                      • Checks computer location settings
                                                                                                                      PID:8612
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=9040,i,7709782491561350907,4000000454578104387,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=9432 /prefetch:2
                                                                                                                      10⤵
                                                                                                                      • Checks computer location settings
                                                                                                                      • Enumerates system info in registry
                                                                                                                      PID:1996
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=5008,i,15057894717757353412,7602640235578095051,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=7504 /prefetch:8
                                                                                                                      10⤵
                                                                                                                        PID:7668
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9944,i,12167102531930792419,1458349956665412010,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=7092 /prefetch:8
                                                                                                                        10⤵
                                                                                                                          PID:9260
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=7672,i,4202574340879146964,11392594683088480609,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=9832 /prefetch:2
                                                                                                                          10⤵
                                                                                                                          • Checks computer location settings
                                                                                                                          • Enumerates system info in registry
                                                                                                                          PID:9700
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=7744,i,910608064927032301,17148833337874486758,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=7808 /prefetch:2
                                                                                                                          10⤵
                                                                                                                          • Checks computer location settings
                                                                                                                          PID:10128
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=7600,i,16299686924144582240,10086045550219513448,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=1820 /prefetch:8
                                                                                                                          10⤵
                                                                                                                          • Enumerates system info in registry
                                                                                                                          PID:664
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=1436,i,8396228363002665079,6279133837386076081,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=8760 /prefetch:2
                                                                                                                          10⤵
                                                                                                                          • Checks computer location settings
                                                                                                                          PID:10496
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=1824,i,7849453719410012178,14973637223936226402,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=7540 /prefetch:8
                                                                                                                          10⤵
                                                                                                                          • Enumerates system info in registry
                                                                                                                          PID:8236
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=8400,i,1842329936795408321,2479008058191077360,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=9608 /prefetch:2
                                                                                                                          10⤵
                                                                                                                          • Checks computer location settings
                                                                                                                          PID:9208
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=8660,i,11172535959391476697,12476350702665467625,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=5924 /prefetch:8
                                                                                                                          10⤵
                                                                                                                            PID:5504
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=7052,i,16281610849405532923,1686525652248711219,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=5772 /prefetch:2
                                                                                                                            10⤵
                                                                                                                            • Checks computer location settings
                                                                                                                            PID:5304
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9608,i,9653342046859235193,8552358341396631782,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=6324 /prefetch:8
                                                                                                                            10⤵
                                                                                                                              PID:9000
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9408,i,11417400704735832616,14923647421559863982,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=9704 /prefetch:8
                                                                                                                              10⤵
                                                                                                                              • Enumerates system info in registry
                                                                                                                              PID:11432
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=7416,i,16855879174895384867,3173527888105906085,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=8920 /prefetch:2
                                                                                                                              10⤵
                                                                                                                              • Checks computer location settings
                                                                                                                              • Enumerates system info in registry
                                                                                                                              PID:8632
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=9828,i,10312633470793743236,3923046204858857383,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=7416 /prefetch:2
                                                                                                                              10⤵
                                                                                                                              • Checks computer location settings
                                                                                                                              PID:5164
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --metrics-shmem-handle=9736,i,1694395597322324502,17457287758181224347,524288 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=3132 /prefetch:8
                                                                                                                              10⤵
                                                                                                                                PID:12108
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=6680,i,814330099479313505,13877134448605601256,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=7412 /prefetch:2
                                                                                                                                10⤵
                                                                                                                                • Checks computer location settings
                                                                                                                                PID:7868
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition Yx GX)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-specific-affiliation=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=off --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,DNA-112027-gx-mission-widget-on:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=9432,i,16357265599601002859,15079789787116360734,2097152 --field-trial-handle=1908,i,7738427688884090127,3045381388129522494,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,14197284701637988409,3134561110924594806,4 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=5124 /prefetch:2
                                                                                                                                10⤵
                                                                                                                                • Checks computer location settings
                                                                                                                                • Enumerates system info in registry
                                                                                                                                PID:7512
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe"
                                                                                                                          7⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                          PID:3396
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\assistant\assistant_installer.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\assistant\assistant_installer.exe" --version
                                                                                                                          7⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                          PID:2772
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\assistant\assistant_installer.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x260,0x264,0x268,0x23c,0x26c,0xb6cb80,0xb6cb8c,0xb6cb98
                                                                                                                            8⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            • Loads dropped DLL
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            PID:6912
                                                                                                                    • C:\Windows\SysWOW64\msiexec.exe
                                                                                                                      "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\is-TQP3MYM1TF.tmp\f1a2d1824bd6abe3b5971e5f0e9ebc49.msi" /qn VID=118 YABROWSER=y YAHOMEPAGE=y YAQSEARCH=y ILIGHT=1 YBDEFAULT=y
                                                                                                                      5⤵
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      PID:704
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\fnfLauncher\629a008f6df9f0aef949932489c1c744.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\fnfLauncher\629a008f6df9f0aef949932489c1c744.exe" "C:\Users\Admin\AppData\Local\Programs\fnfLauncher\Atomic Heart.lnk" 5386
                                                                                                                      5⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                      PID:2636
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\fnfLauncher\629a008f6df9f0aef949932489c1c744.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\fnfLauncher\629a008f6df9f0aef949932489c1c744.exe" "C:\Users\Admin\AppData\Local\Programs\fnfLauncher\War Thunder.lnk" 5386
                                                                                                                      5⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                      PID:2008
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\fnfLauncher\629a008f6df9f0aef949932489c1c744.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\fnfLauncher\629a008f6df9f0aef949932489c1c744.exe" "C:\Users\Admin\AppData\Local\Programs\fnfLauncher\Warface.lnk" 5386
                                                                                                                      5⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                      PID:2872
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\fnfLauncher\629a008f6df9f0aef949932489c1c744.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\fnfLauncher\629a008f6df9f0aef949932489c1c744.exe" "C:\Users\Admin\AppData\Local\Programs\fnfLauncher\Мàëèíîâêà.lnk" 5386
                                                                                                                      5⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                      PID:5536
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\fnfLauncher\fnfLauncher.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\fnfLauncher\fnfLauncher.exe"
                                                                                                                      5⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      PID:5936
                                                                                                                    • C:\Windows\SysWOW64\cmd.exe
                                                                                                                      "C:\Windows\system32\cmd.exe" /C ping 127.0.0.1 -n 3 > nul & move /Y "C:\Users\Admin\Downloads\FF01_Game set updown free.exe" "C:\Users\Admin\Downloads\FF01 Game set updown free.exe"
                                                                                                                      5⤵
                                                                                                                      • Executes a command shell one-liner
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                      PID:5972
                                                                                                                      • C:\Windows\SysWOW64\PING.EXE
                                                                                                                        ping 127.0.0.1 -n 3
                                                                                                                        6⤵
                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                        • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                        • Runs ping.exe
                                                                                                                        PID:6020
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6448,i,6586950957308269055,3988855473259818990,262144 --field-trial-handle=2064,i,17418283800178009962,16755750129883116265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6460 /prefetch:8
                                                                                                                  3⤵
                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                  PID:368
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\{4516D6DB-EFAB-4E58-BE96-B20DC54DEDC9}.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\{4516D6DB-EFAB-4E58-BE96-B20DC54DEDC9}.exe" --YBDEFAULT --job-name=yBrowserDownloader-{9C9D5608-8466-444A-9B3B-21D0B63BE0B2} --send-statistics --local-path=C:\Users\Admin\AppData\Local\Temp\{4516D6DB-EFAB-4E58-BE96-B20DC54DEDC9}.exe --YABROWSER --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --silent --make-browser-default-after-import --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=5988308-118&ui={5cf439e3-3661-49d4-8435-3554f6cd5cd3} --use-user-default-locale
                                                                                                                2⤵
                                                                                                                • Downloads MZ/PE file
                                                                                                                • Executes dropped EXE
                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                PID:5592
                                                                                                                • C:\Users\Admin\AppData\Local\Temp\ybDCB5.tmp
                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\ybDCB5.tmp" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\6ef6725b-db70-492c-85c2-4928a602d382.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=690838577 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-{9C9D5608-8466-444A-9B3B-21D0B63BE0B2} --local-path="C:\Users\Admin\AppData\Local\Temp\{4516D6DB-EFAB-4E58-BE96-B20DC54DEDC9}.exe" --make-browser-default-after-import --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=5988308-118&ui={5cf439e3-3661-49d4-8435-3554f6cd5cd3} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\7b68da12-7d1d-4cb5-9db2-fe026bbaacb9.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico" --ybdefault
                                                                                                                  3⤵
                                                                                                                  • Executes dropped EXE
                                                                                                                  PID:6672
                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\YB_83395.tmp\setup.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\YB_83395.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_83395.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\6ef6725b-db70-492c-85c2-4928a602d382.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=690838577 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-{9C9D5608-8466-444A-9B3B-21D0B63BE0B2} --local-path="C:\Users\Admin\AppData\Local\Temp\{4516D6DB-EFAB-4E58-BE96-B20DC54DEDC9}.exe" --make-browser-default-after-import --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=5988308-118&ui={5cf439e3-3661-49d4-8435-3554f6cd5cd3} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\7b68da12-7d1d-4cb5-9db2-fe026bbaacb9.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico" --ybdefault
                                                                                                                    4⤵
                                                                                                                    • Checks computer location settings
                                                                                                                    • Executes dropped EXE
                                                                                                                    PID:448
                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\YB_83395.tmp\setup.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\YB_83395.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_83395.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\6ef6725b-db70-492c-85c2-4928a602d382.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=690838577 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-{9C9D5608-8466-444A-9B3B-21D0B63BE0B2} --local-path="C:\Users\Admin\AppData\Local\Temp\{4516D6DB-EFAB-4E58-BE96-B20DC54DEDC9}.exe" --make-browser-default-after-import --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=5988308-118&ui={5cf439e3-3661-49d4-8435-3554f6cd5cd3} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\7b68da12-7d1d-4cb5-9db2-fe026bbaacb9.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico" --ybdefault --verbose-logging --run-as-admin --target-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application" --child-setup-process --restart-as-admin-time=822557642
                                                                                                                      5⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • Drops file in Windows directory
                                                                                                                      • System Time Discovery
                                                                                                                      • Modifies registry class
                                                                                                                      PID:2644
                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\YB_83395.tmp\setup.exe
                                                                                                                        C:\Users\Admin\AppData\Local\Temp\YB_83395.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=2644 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.8.1.966 --initial-client-data=0x2a4,0x2a8,0x2ac,0x28c,0x2b0,0x7ff6a0f22490,0x7ff6a0f2249c,0x7ff6a0f224a8
                                                                                                                        6⤵
                                                                                                                        • Executes dropped EXE
                                                                                                                        PID:1612
                                                                                                                      • C:\Windows\SystemTemp\sdwra_2644_546734280\service_update.exe
                                                                                                                        "C:\Windows\SystemTemp\sdwra_2644_546734280\service_update.exe" --setup
                                                                                                                        6⤵
                                                                                                                        • Checks computer location settings
                                                                                                                        PID:8488
                                                                                                                        • C:\Program Files (x86)\Yandex\YandexBrowser\26.8.1.966\service_update.exe
                                                                                                                          "C:\Program Files (x86)\Yandex\YandexBrowser\26.8.1.966\service_update.exe" --install
                                                                                                                          7⤵
                                                                                                                            PID:8740
                                                                                                                        • C:\Windows\SystemTemp\scoped_dir2644_2071649338\explorer.exe
                                                                                                                          "C:\Windows\SystemTemp\scoped_dir2644_2071649338\explorer.exe" --pttw1="C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Алиса AI.lnk" --shortcut-name-with-alice-for-new-users-enabled
                                                                                                                          6⤵
                                                                                                                          • Checks computer location settings
                                                                                                                          • Drops file in Windows directory
                                                                                                                          PID:4128
                                                                                                                          • C:\Windows\SystemTemp\scoped_dir2644_2071649338\explorer.exe
                                                                                                                            C:\Windows\SystemTemp\scoped_dir2644_2071649338\explorer.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=4128 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.8.1.966 --initial-client-data=0x2a4,0x2a8,0x2ac,0x280,0x2b0,0x7ff7d8fe2490,0x7ff7d8fe249c,0x7ff7d8fe24a8
                                                                                                                            7⤵
                                                                                                                              PID:7960
                                                                                                                          • C:\Windows\SystemTemp\scoped_dir2644_57049021\explorer.exe
                                                                                                                            "C:\Windows\SystemTemp\scoped_dir2644_57049021\explorer.exe" --pttw1="C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Яндекс Браузер с Алисой AI.lnk" --shortcut-name-with-alice-for-new-users-enabled
                                                                                                                            6⤵
                                                                                                                            • Checks computer location settings
                                                                                                                            PID:8332
                                                                                                                            • C:\Windows\SystemTemp\scoped_dir2644_57049021\explorer.exe
                                                                                                                              C:\Windows\SystemTemp\scoped_dir2644_57049021\explorer.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=8332 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.8.1.966 --initial-client-data=0x2a8,0x2ac,0x2b0,0x284,0x2b4,0x7ff6f7412490,0x7ff6f741249c,0x7ff6f74124a8
                                                                                                                              7⤵
                                                                                                                                PID:8348
                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Temp\clids.xml"
                                                                                                                              6⤵
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:4868
                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\source2644_117266269\Browser-bin\clids_yandex_second.xml"
                                                                                                                              6⤵
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:1420
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\fnfLauncher\fnfLauncher.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\fnfLauncher\fnfLauncher.exe"
                                                                                                                      2⤵
                                                                                                                      • Checks computer location settings
                                                                                                                      • Executes dropped EXE
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      PID:4664
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\FNFLAU~1\data\Funkin.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\FNFLAU~1\data\Funkin.exe"
                                                                                                                        3⤵
                                                                                                                        • Executes dropped EXE
                                                                                                                        • Loads dropped DLL
                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                        PID:5420
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://gtalauncher.ru/FF01/GTA
                                                                                                                        3⤵
                                                                                                                          PID:3836
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://gtalauncher.ru/FF01/GTA
                                                                                                                            4⤵
                                                                                                                              PID:4344
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://gtalauncher.ru/FF01/WF
                                                                                                                            3⤵
                                                                                                                              PID:652
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://gtalauncher.ru/FF01/WF
                                                                                                                                4⤵
                                                                                                                                • Checks processor information in registry
                                                                                                                                • Enumerates system info in registry
                                                                                                                                • Modifies data under HKEY_USERS
                                                                                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                PID:3948
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x25c,0x260,0x264,0x258,0x304,0x7ffc4ed8c188,0x7ffc4ed8c194,0x7ffc4ed8c1a0
                                                                                                                                  5⤵
                                                                                                                                    PID:4628
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,2884204642494281260,6320367754125038437,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:3
                                                                                                                                    5⤵
                                                                                                                                    • System Time Discovery
                                                                                                                                    PID:3904
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,11782127257079817319,641874136116056507,262144 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
                                                                                                                                    5⤵
                                                                                                                                      PID:2860
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,5329635871953776415,16089045379436438901,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
                                                                                                                                      5⤵
                                                                                                                                        PID:5624
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,15958622803369553926,13679293734793782248,2097152 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
                                                                                                                                        5⤵
                                                                                                                                          PID:5792
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,7045719165462640338,10958185180800236599,2097152 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
                                                                                                                                          5⤵
                                                                                                                                            PID:5676
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4040,i,692416527137102924,10132977163047839689,2097152 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:1
                                                                                                                                            5⤵
                                                                                                                                              PID:4632
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4052,i,3624790434313159027,4620862760071311699,2097152 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:2
                                                                                                                                              5⤵
                                                                                                                                                PID:5524
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,12172136274439319076,18233839070555651120,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:8
                                                                                                                                                5⤵
                                                                                                                                                  PID:6120
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,7779896934737400059,10062211709957133089,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
                                                                                                                                                  5⤵
                                                                                                                                                    PID:6132
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,15285489285489685626,9872677248794885932,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:8
                                                                                                                                                    5⤵
                                                                                                                                                      PID:1680
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,8956915865757071158,5136545479727786196,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
                                                                                                                                                      5⤵
                                                                                                                                                        PID:2392
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5080,i,15179940833865110513,15773489676439040215,2097152 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:1
                                                                                                                                                        5⤵
                                                                                                                                                          PID:4720
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,11677325395564500843,16775547547763836315,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
                                                                                                                                                          5⤵
                                                                                                                                                            PID:1392
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,11677325395564500843,16775547547763836315,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
                                                                                                                                                            5⤵
                                                                                                                                                              PID:2236
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,11926675642584379880,7535114430557698285,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
                                                                                                                                                              5⤵
                                                                                                                                                                PID:4272
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6420,i,6046803192262498368,5058809227350600266,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:8
                                                                                                                                                                5⤵
                                                                                                                                                                  PID:1696
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,16451180514940968953,9782767519398896928,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
                                                                                                                                                                  5⤵
                                                                                                                                                                    PID:5404
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6776,i,3670581667067326197,12468001872770934295,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:8
                                                                                                                                                                    5⤵
                                                                                                                                                                      PID:5056
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6708,i,250915993584643744,11790178527470354139,524288 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
                                                                                                                                                                      5⤵
                                                                                                                                                                        PID:6452
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7020,i,17305925086760570818,12391983288966988793,2097152 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:1
                                                                                                                                                                        5⤵
                                                                                                                                                                          PID:6212
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=4536,i,294022471717381508,3893370694681134858,2097152 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:1
                                                                                                                                                                          5⤵
                                                                                                                                                                            PID:5492
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6940,i,6832334993918140338,10608426417033990785,2097152 --field-trial-handle=2252,i,1211931235849532153,4645024378755159918,262144 --variations-seed-version --mojo-platform-channel-handle=6908 /prefetch:1
                                                                                                                                                                            5⤵
                                                                                                                                                                              PID:6364
                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --progress-window=0 --install-start-time-no-uac=690838577
                                                                                                                                                                        2⤵
                                                                                                                                                                        • Checks computer location settings
                                                                                                                                                                        • Adds Run key to start application
                                                                                                                                                                        • Checks for any installed AV software in registry
                                                                                                                                                                        • Drops file in Windows directory
                                                                                                                                                                        • Checks processor information in registry
                                                                                                                                                                        • Modifies registry class
                                                                                                                                                                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                        PID:1660
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                          C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id= --annotation=main_process_pid=1660 --annotation=metrics_client_id=c6bf86198deb4a07a73a0693a84ca6d8 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.8.1.966 --initial-client-data=0x164,0x168,0x16c,0x140,0x170,0x7ffc466b89a0,0x7ffc466b89ac,0x7ffc466b89b8
                                                                                                                                                                          3⤵
                                                                                                                                                                            PID:2980
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --process-name="Network Service" --metrics-shmem-handle=2232,i,1621054330245537629,10639735933715280840,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2540 --brver=26.8.1.966 /prefetch:3
                                                                                                                                                                            3⤵
                                                                                                                                                                            • System Time Discovery
                                                                                                                                                                            PID:5024
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --gpu-process-kind=sandboxed --metrics-shmem-handle=2136,i,10756684053012989510,16308220031375211102,262144 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2484 /prefetch:2
                                                                                                                                                                            3⤵
                                                                                                                                                                              PID:6000
                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --gpu-process-kind=trampoline --metrics-shmem-handle=2192,i,5835372523965225004,10805689647789910549,262144 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2516 /prefetch:6
                                                                                                                                                                              3⤵
                                                                                                                                                                                PID:6384
                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Storage Service" --metrics-shmem-handle=2712,i,10847836253584339036,8994998426349409411,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2996 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                3⤵
                                                                                                                                                                                  PID:5620
                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=ru --service-sandbox-type=none --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Video Capture" --metrics-shmem-handle=3516,i,10356985785216037546,10152614791613403482,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3548 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                  3⤵
                                                                                                                                                                                    PID:5080
                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=ru --service-sandbox-type=audio --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Audio Service" --metrics-shmem-handle=3436,i,11543310540013707597,15360682851629403844,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3524 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                    3⤵
                                                                                                                                                                                      PID:8292
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4644,i,5532787456513297767,16838994842793017542,2097152 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4668 /prefetch:1
                                                                                                                                                                                      3⤵
                                                                                                                                                                                      • Checks computer location settings
                                                                                                                                                                                      • System Time Discovery
                                                                                                                                                                                      PID:9496
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=ru --service-sandbox-type=none --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Импорт профилей" --metrics-shmem-handle=5056,i,12501331205477345881,14662307655455451827,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5064 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                      3⤵
                                                                                                                                                                                        PID:9772
                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=uwp_cookie_provider.mojom.UwpCookieProvider --lang=ru --service-sandbox-type=utility --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name=uwp_cookie_provider.mojom.UwpCookieProvider --metrics-shmem-handle=5044,i,15444932382111119934,16649327072449718735,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5112 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                        3⤵
                                                                                                                                                                                          PID:9348
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=5288,i,18076188923159656632,10601354498463863130,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5300 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                          3⤵
                                                                                                                                                                                            PID:10116
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=5316,i,317714928841124912,8641996629630736401,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5328 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                            3⤵
                                                                                                                                                                                              PID:10144
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=5544,i,2204267573445374408,6894232718270842463,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5564 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                              3⤵
                                                                                                                                                                                                PID:9588
                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\26.8.1.966\Installer\setup.exe
                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\26.8.1.966\Installer\setup.exe" --set-set-as-default-browser --set-as-default-browser
                                                                                                                                                                                                3⤵
                                                                                                                                                                                                • Drops file in Windows directory
                                                                                                                                                                                                • Modifies registry class
                                                                                                                                                                                                PID:7704
                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\26.8.1.966\Installer\setup.exe
                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\26.8.1.966\Installer\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=7704 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.8.1.966 --initial-client-data=0x2a4,0x2a8,0x2ac,0x280,0x2b0,0x7ff6475f2490,0x7ff6475f249c,0x7ff6475f24a8
                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                    PID:10052
                                                                                                                                                                                                  • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                    regini.exe "C:\Windows\SystemTemp\scoped_dir7704_795726931\w.bin"
                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                      PID:11600
                                                                                                                                                                                                    • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                      regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1576632185\d.bin"
                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                        PID:11836
                                                                                                                                                                                                      • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                        regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1576632185\w.bin"
                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                          PID:11904
                                                                                                                                                                                                        • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                          regini.exe "C:\Windows\SystemTemp\scoped_dir7704_587064138\d.bin"
                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                            PID:12012
                                                                                                                                                                                                          • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                            regini.exe "C:\Windows\SystemTemp\scoped_dir7704_587064138\w.bin"
                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                              PID:12124
                                                                                                                                                                                                            • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                              regini.exe "C:\Windows\SystemTemp\scoped_dir7704_665402895\d.bin"
                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                PID:12184
                                                                                                                                                                                                              • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                regini.exe "C:\Windows\SystemTemp\scoped_dir7704_665402895\w.bin"
                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                  PID:12260
                                                                                                                                                                                                                • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                  regini.exe "C:\Windows\SystemTemp\scoped_dir7704_2139294390\d.bin"
                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                    PID:10208
                                                                                                                                                                                                                  • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                    regini.exe "C:\Windows\SystemTemp\scoped_dir7704_2139294390\w.bin"
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                      PID:9244
                                                                                                                                                                                                                    • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                      regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1230198117\d.bin"
                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                        PID:10148
                                                                                                                                                                                                                      • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                        regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1230198117\w.bin"
                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                          PID:9972
                                                                                                                                                                                                                        • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                          regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1781937633\d.bin"
                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                            PID:9940
                                                                                                                                                                                                                          • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                            regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1781937633\w.bin"
                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                              PID:9984
                                                                                                                                                                                                                            • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                              regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1114525999\d.bin"
                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                PID:9868
                                                                                                                                                                                                                              • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1114525999\w.bin"
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                  PID:8200
                                                                                                                                                                                                                                • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                  regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1015357373\pp.bin"
                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                    PID:9376
                                                                                                                                                                                                                                  • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                    regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1015357373\ww.bin"
                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                      PID:10272
                                                                                                                                                                                                                                    • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                      regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1885262406\pp.bin"
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                        PID:10348
                                                                                                                                                                                                                                      • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                        regini.exe "C:\Windows\SystemTemp\scoped_dir7704_1885262406\ww.bin"
                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                          PID:10504
                                                                                                                                                                                                                                        • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                          regini.exe "C:\Windows\SystemTemp\scoped_dir7704_82313915\pp.bin"
                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                            PID:10648
                                                                                                                                                                                                                                          • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                            regini.exe "C:\Windows\SystemTemp\scoped_dir7704_82313915\ww.bin"
                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                              PID:10708
                                                                                                                                                                                                                                            • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                              regini.exe "C:\Windows\SystemTemp\scoped_dir7704_991391822\pp.bin"
                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                PID:10776
                                                                                                                                                                                                                                              • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                                regini.exe "C:\Windows\SystemTemp\scoped_dir7704_991391822\ww.bin"
                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                  PID:10824
                                                                                                                                                                                                                                                • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                                  regini.exe "C:\Windows\SystemTemp\scoped_dir7704_983680529\pp.bin"
                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                    PID:10884
                                                                                                                                                                                                                                                  • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                                    regini.exe "C:\Windows\SystemTemp\scoped_dir7704_983680529\ww.bin"
                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                      PID:10936
                                                                                                                                                                                                                                                    • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                                      regini.exe "C:\Windows\SystemTemp\scoped_dir7704_246551302\pp.bin"
                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                        PID:10988
                                                                                                                                                                                                                                                      • C:\Windows\SYSTEM32\regini.exe
                                                                                                                                                                                                                                                        regini.exe "C:\Windows\SystemTemp\scoped_dir7704_246551302\ww.bin"
                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                          PID:11640
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4664,i,9546421955925095944,1174875027631675998,2097152 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5520 /prefetch:1
                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                        • Checks computer location settings
                                                                                                                                                                                                                                                        • System Time Discovery
                                                                                                                                                                                                                                                        PID:11180
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5380,i,10251463157902582259,11432664911907260844,2097152 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5424 /prefetch:1
                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                        • Checks computer location settings
                                                                                                                                                                                                                                                        • System Time Discovery
                                                                                                                                                                                                                                                        PID:11184
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=4768,i,956725039719282802,6718038273233892206,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5284 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                          PID:11208
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5864,i,4617615043094902273,3907904452895590642,2097152 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5896 /prefetch:1
                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                          • Checks computer location settings
                                                                                                                                                                                                                                                          • System Time Discovery
                                                                                                                                                                                                                                                          PID:11692
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=2520,i,11293615737272562655,2058549118041020394,2097152 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=4804 /prefetch:1
                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                          • Checks computer location settings
                                                                                                                                                                                                                                                          • System Time Discovery
                                                                                                                                                                                                                                                          PID:4208
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3136,i,12557839298748153984,17252210179334677366,2097152 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=3104 /prefetch:1
                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                          • Checks computer location settings
                                                                                                                                                                                                                                                          • System Time Discovery
                                                                                                                                                                                                                                                          PID:10104
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=4368,i,16948618213626716506,15922914183001279938,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6148 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                            PID:9884
                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=4840,i,2379606143373334669,12515118701837152420,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6148 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                              PID:10404
                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=6180,i,4803758871650967134,14395754304757557210,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=4788 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                PID:10416
                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=4884,i,1572410070364119218,7350841182803246429,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=4248 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                  PID:10428
                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --gpu-process-kind=info-collection --metrics-shmem-handle=5240,i,32853473279720669,10360428548104319157,262144 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=5160 --enable-elf-protection /prefetch:8
                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                    PID:5724
                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=ru --service-sandbox-type=none --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=6668,i,4261379170194217614,9340186515716457817,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=6612 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                      PID:10612
                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=6668,i,398351948371020751,3911394392306876188,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=4908 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                        PID:3832
                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=6696,i,2768600623322508716,6352032608487863676,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=6780 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                          PID:11052
                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=6832,i,10938692274102603932,12865333710916137235,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=6772 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                            PID:11040
                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=6688,i,6244696966248325993,3993904257677937357,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=6824 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                              PID:9720
                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=5768,i,5416564112292793555,18283540384682159469,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=7040 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                PID:11032
                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7104,i,16230289738095213676,11522123970657788929,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=7080 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                  PID:10092
                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7004,i,6436206006561733481,10760550937518601904,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=6760 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                    PID:9776
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7160,i,1728586196422891753,5300011897370489109,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=6892 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                      PID:11352
                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=4908,i,1520855587812233042,6210091409921140854,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=7176 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                        PID:4836
                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7040,i,16789768454730853190,5360735644507756011,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=7172 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                          PID:8
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7308,i,17268612636452282955,7875939922390866101,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=7044 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                            PID:10760
                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=6920,i,10869406468981130630,11306215762459985918,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=7092 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                              PID:8408
                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=6752,i,15377495703154100512,3900954921759918673,2097152 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=5768 /prefetch:1
                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                              • System Time Discovery
                                                                                                                                                                                                                                                                                              PID:6712
                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=7004,i,15101974686764004851,11797045783113021939,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=6760 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                PID:12128
                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=6772,i,947418093610636740,6512459622819596917,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=6964 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                  PID:11784
                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=6068,i,4798616551383615032,13653511341808710004,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=7096 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                    PID:5528
                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=5036,i,8663660149106276561,10313434082755518820,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=6772 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                      PID:1284
                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --gpu-process-kind=sandboxed --metrics-shmem-handle=2152,i,8710492785375993968,394058417133438642,262144 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=2156 /prefetch:2
                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                        PID:10532
                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=6600,i,5201481687732409806,8431123300817761019,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=3428 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                          PID:9544
                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=6564,i,10878755834654185300,806438003054080250,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=3208 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                            PID:10716
                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=2944,i,10281720468595019253,927302493833035987,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=5100 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                              PID:644
                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=5076,i,2701820802929320325,15826307860130407238,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=6576 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                PID:12004
                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=5064,i,6362580778039852824,11677849174044046685,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=3184 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                  PID:8036
                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=3192,i,8162896185799067063,7276908416126506609,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=4580 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                    PID:3844
                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=7004,i,4573046124201532076,13670467200515633683,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=4560 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                      PID:6252
                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=6520,i,848242388024882116,227538242325000645,524288 --field-trial-handle=2496,i,4918176193092510764,15193060173790778730,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2500,i,14421428071980307316,13293328758748456688,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=5260 --brver=26.8.1.966 /prefetch:8
                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                        PID:10172
                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                      PID:1680
                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                        PID:2772
                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\msiexec.exe
                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\msiexec.exe /V
                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                        • Badlisted process makes network request
                                                                                                                                                                                                                                                                                                                        • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                        • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                        PID:2512
                                                                                                                                                                                                                                                                                                                        • C:\Windows\syswow64\MsiExec.exe
                                                                                                                                                                                                                                                                                                                          C:\Windows\syswow64\MsiExec.exe -Embedding 2D1FD3CC97BEB861D682C9CAD9EC3931
                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                          PID:3304
                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\8D1DCA38-0638-4275-9603-7D740E711E98\lite_installer.exe
                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\8D1DCA38-0638-4275-9603-7D740E711E98\lite_installer.exe" --use-user-default-locale --silent --make-browser-default-after-import --YBDEFAULT --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --YABROWSER
                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                            • Downloads MZ/PE file
                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                            • Modifies system certificate store
                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                            PID:2216
                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\06AC113F-5CA9-4F34-A87C-B37244CE843C\seederexe.exe
                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\06AC113F-5CA9-4F34-A87C-B37244CE843C\seederexe.exe" "--yqs=y" "--yhp=y" "--ilight=1" "--oem=" "--nopin=n" "--pin_custom=n" "--pin_desktop=n" "--pin_taskbar=y" "--locale=us" "--browser=y" "--browser_default=y" "--loglevel=trace" "--ess=" "--clids=C:\Users\Admin\AppData\Local\Temp\clids-yasearch.xml" "--sender=C:\Users\Admin\AppData\Local\Temp\1FD095F3-C89B-4B3A-AC0D-ADCED1D0B849\sender.exe" "--is_elevated=UNKNOWN" "--ui_level=2" "--good_token=x" "--no_opera=n"
                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                            • Modifies Internet Explorer settings
                                                                                                                                                                                                                                                                                                                            • Modifies Internet Explorer start page
                                                                                                                                                                                                                                                                                                                            • Modifies registry class
                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                            PID:1528
                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe
                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent --pin-taskbar=y --pin-desktop=n
                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                              PID:5604
                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\pin\explorer.exe
                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent --pin-taskbar=y --pin-desktop=n /pin-path="C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk" --is-pinning
                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                PID:2156
                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\1FD095F3-C89B-4B3A-AC0D-ADCED1D0B849\sender.exe
                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\1FD095F3-C89B-4B3A-AC0D-ADCED1D0B849\sender.exe --send "/status.xml?clid=5988345-118&uuid=5cf439e3-3661-49d4-8435-3554f6cd5cd3&vnt=Windows 10x64&file-no=8%0A10%0A11%0A12%0A13%0A15%0A17%0A18%0A20%0A21%0A22%0A25%0A36%0A40%0A42%0A45%0A58%0A61%0A89%0A102%0A103%0A111%0A123%0A124%0A126%0A129%0A"
                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                              PID:5680
                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                          PID:2156
                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\360\Total Security\safemon\360Tray.exe
                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\360\Total Security\safemon\360Tray.exe" /start
                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                          • Checks computer location settings
                                                                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                          • Checks whether UAC is enabled
                                                                                                                                                                                                                                                                                                                          • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                          PID:4688
                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe" /start /elevated
                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                            • Sets service image path in registry
                                                                                                                                                                                                                                                                                                                            • Checks computer location settings
                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                            • Unexpected DNS network traffic destination
                                                                                                                                                                                                                                                                                                                            • Checks whether UAC is enabled
                                                                                                                                                                                                                                                                                                                            • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                            • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                            • Checks system information in the registry
                                                                                                                                                                                                                                                                                                                            • Checks for VirtualBox DLLs, possible anti-VM trick
                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                            • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                            • Modifies registry class
                                                                                                                                                                                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                            PID:660
                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\360\Total Security\360TsLiveUpd.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\360\Total Security\360TsLiveUpd.exe" /force
                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                              • Drops file in Drivers directory
                                                                                                                                                                                                                                                                                                                              • Sets service image path in registry
                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                              • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                              • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                              • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                              • Suspicious behavior: LoadsDriver
                                                                                                                                                                                                                                                                                                                              PID:2784
                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe" /install
                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                              • Sets service image path in registry
                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                              • Checks for any installed AV software in registry
                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                              PID:5772
                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\360\Total Security\safemon\PopWndLog.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\360\Total Security\safemon\PopWndLog.exe" /cleantip=1
                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                              • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                              • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                              PID:6704
                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\360\Total Security\safemon\PopWndLog.exe
                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\360\Total Security\safemon\PopWndLog.exe" /ExShowTrayIcon
                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                PID:2092
                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe" /ExHideTrayIcon
                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                              • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                              PID:3028
                                                                                                                                                                                                                                                                                                                            • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                              C:\Windows\system32\regsvr32.exe /s "C:\Program Files (x86)\360\Total Security\safemon\safemon.dll"
                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                              PID:3300
                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\360\Total Security\softmgr\safesvr.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\360\Total Security\softmgr\safesvr.exe" /svc
                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                              • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                              PID:7184
                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\360\Total Security\PromoUtil.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\360\Total Security\PromoUtil.exe"
                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                              • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                              PID:8412
                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" -WebViewMangerSharedName="1.GameChromeClient.360TotalSecurity" --ClientWaitTimeout=5000 --local_web_path="C:\Program Files (x86)\360\Total Security\config\webui\safemain.uiz" --cache_path="C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache" --core_path="C:\Program Files (x86)\360\Total Security\Utils\cef\se"
                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                                • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                                                                                                                                PID:8608
                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=gpu-process --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --gpu-preferences=UAAAAAAAAADgAAAIAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1956,i,13866893825370208169,11412920610556285239,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=1948 /prefetch:2
                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                    PID:6508
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --chromeshell=1 --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --field-trial-handle=1968,i,13866893825370208169,11412920610556285239,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=1960 /prefetch:3
                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                      PID:8360
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --chromeshell=1 --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --field-trial-handle=2160,i,13866893825370208169,11412920610556285239,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:8
                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                      • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                      PID:7840
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --no-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3248,i,13866893825370208169,11412920610556285239,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=3244 /prefetch:1
                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                      • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                      PID:11756
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3524,i,13866893825370208169,11412920610556285239,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                      • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                      PID:11872
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\360\Total Security\IxnLoginServer.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\360\Total Security\IxnLoginServer.exe" --user_server=360ts
                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                    • Checks whether UAC is enabled
                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                    PID:8924
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\360\Total Security\IxnLoginServer.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\360\Total Security\IxnLoginServer.exe" --user_server=360ts --lowrun
                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                      • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                      PID:8584
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" -WebViewMangerSharedName="1.GameChromeClient.h8n_360ts" --ClientWaitTimeout=5000 --cache_path="C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache" --core_path="C:\Program Files (x86)\360\Total Security\Utils\cef\se"
                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                        • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                        • Checks for any installed AV software in registry
                                                                                                                                                                                                                                                                                                                                        • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                                        • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                                        • Enumerates system info in registry
                                                                                                                                                                                                                                                                                                                                        PID:2620
                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=gpu-process --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --gpu-preferences=UAAAAAAAAADgAAAIAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2168,i,6603598610092417193,10904250170933111584,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:2
                                                                                                                                                                                                                                                                                                                                          7⤵
                                                                                                                                                                                                                                                                                                                                            PID:1524
                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --chromeshell=1 --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --field-trial-handle=2232,i,6603598610092417193,10904250170933111584,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3
                                                                                                                                                                                                                                                                                                                                            7⤵
                                                                                                                                                                                                                                                                                                                                              PID:8136
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --chromeshell=1 --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --field-trial-handle=2256,i,6603598610092417193,10904250170933111584,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:8
                                                                                                                                                                                                                                                                                                                                              7⤵
                                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                              PID:4960
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --no-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3080,i,6603598610092417193,10904250170933111584,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:1
                                                                                                                                                                                                                                                                                                                                              7⤵
                                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                              PID:8668
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --no-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3180,i,6603598610092417193,10904250170933111584,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:1
                                                                                                                                                                                                                                                                                                                                              7⤵
                                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                              PID:5364
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --chromeshell=1 --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --field-trial-handle=4048,i,6603598610092417193,10904250170933111584,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=4044 /prefetch:8
                                                                                                                                                                                                                                                                                                                                              7⤵
                                                                                                                                                                                                                                                                                                                                                PID:10048
                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=3184,i,6603598610092417193,10904250170933111584,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                7⤵
                                                                                                                                                                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                PID:11256
                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\360\Total Security\Utils\cef\WebViewHost64.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache" --main-ver=16.1.6060.64 --mainprocess-ver=16.1.6060.64 --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4336,i,6603598610092417193,10904250170933111584,262144 --disable-features=HardwareMediaKeyHandling --variations-seed-version --mojo-platform-channel-handle=3364 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                7⤵
                                                                                                                                                                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                PID:5728
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\360\Total Security\PatchUp.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\360\Total Security\PatchUp.exe" /down_and_install=0
                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                        • Unexpected DNS network traffic destination
                                                                                                                                                                                                                                                                                                                                        • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                                        • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                        PID:12260
                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                                                                                                                                                                                                                    C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                    PID:5384
                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\drivers\360AvFlt.sys
                                                                                                                                                                                                                                                                                                                                    C:\Windows\system32\drivers\360AvFlt.sys
                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                    PID:7888
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe"
                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                    PID:2852
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\360\Total Security\SoftMgr\EaInstHelper64.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\360\Total Security\SoftMgr\EaInstHelper64.exe" /Install_run
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                      • Drops file in Drivers directory
                                                                                                                                                                                                                                                                                                                                      • Sets service image path in registry
                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                      • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                      PID:6232
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe"
                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                    • Drops file in Drivers directory
                                                                                                                                                                                                                                                                                                                                    • Sets service image path in registry
                                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                    • Unexpected DNS network traffic destination
                                                                                                                                                                                                                                                                                                                                    • Adds Run key to start application
                                                                                                                                                                                                                                                                                                                                    • Checks for any installed AV software in registry
                                                                                                                                                                                                                                                                                                                                    • Checks whether UAC is enabled
                                                                                                                                                                                                                                                                                                                                    • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                                    • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                                    • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                    • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                    • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: LoadsDriver
                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                    PID:3392
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe" /watch
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                      PID:2032
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe"
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                      • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                      PID:3996
                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\360\Total Security\safemon\bdfltlib.dll"
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                      PID:1368
                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\360\Total Security\safemon\scan.dll"
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                      PID:4180
                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\drivers\360Box64.sys
                                                                                                                                                                                                                                                                                                                                    C:\Windows\system32\drivers\360Box64.sys
                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                    PID:7416
                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                                                                                                                                                                                                                    C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                    PID:7508
                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\drivers\360FsFlt.sys
                                                                                                                                                                                                                                                                                                                                    C:\Windows\system32\drivers\360FsFlt.sys
                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                    PID:7868
                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                                                                                                                                                                                                                    C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                      PID:8796
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Yandex\YandexBrowser\26.8.1.966\service_update.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Yandex\YandexBrowser\26.8.1.966\service_update.exe" --run-as-service
                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                      • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                      • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                      PID:4120
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Yandex\YandexBrowser\26.8.1.966\service_update.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Yandex\YandexBrowser\26.8.1.966\service_update.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=4120 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.8.1.966 --initial-client-data=0x238,0x23c,0x240,0x214,0x244,0x7ff7d7c62d18,0x7ff7d7c62d24,0x7ff7d7c62d30
                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                          PID:5888
                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Yandex\YandexBrowser\26.8.1.966\service_update.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Yandex\YandexBrowser\26.8.1.966\service_update.exe" --update-scheduler
                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                          • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                          PID:720
                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Yandex\YandexBrowser\26.8.1.966\service_update.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Yandex\YandexBrowser\26.8.1.966\service_update.exe" --update-background-scheduler
                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                              PID:6792
                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                          • Enumerates system info in registry
                                                                                                                                                                                                                                                                                                                                          PID:5284
                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x180,0x184,0x17c,0x14c,0x178,0x7ffc391d5310,0x7ffc391d5320,0x7ffc391d5330
                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                              PID:5856
                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                            • Enumerates system info in registry
                                                                                                                                                                                                                                                                                                                                            PID:8256
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x274,0x278,0x27c,0x20c,0x280,0x7ff65b5538d0,0x7ff65b5538dc,0x7ff65b5538e8
                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                PID:7620
                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                  PID:5520
                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --shutdown-if-not-closed-by-system-restart
                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                  PID:11796
                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1788178689 --annotation=last_update_date=1788178689 --annotation=launches_after_update=1 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=11796 --annotation=metrics_client_id=c6bf86198deb4a07a73a0693a84ca6d8 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.8.1.966 --initial-client-data=0x14c,0x150,0x154,0x128,0x158,0x7ffc466b89a0,0x7ffc466b89ac,0x7ffc466b89b8
                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                      PID:11840
                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater --broupdater-origin=auto --bits_job_guid={EB05A138-CF25-4C7B-86A8-EE5E40459073}
                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                      PID:9332
                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1788178689 --annotation=last_update_date=1788178689 --annotation=launches_after_update=1 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=9332 --annotation=metrics_client_id=c6bf86198deb4a07a73a0693a84ca6d8 --annotation=micromode=broupdater --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.8.1.966 --initial-client-data=0x14c,0x150,0x154,0x128,0x158,0x7ffc466b89a0,0x7ffc466b89ac,0x7ffc466b89b8
                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                          PID:10008
                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater-stat-bits --broupdater-stat-name=install --bits_job_guid={4E4463CF-0772-49B9-AC2D-90F47923D4AF}
                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                        • Checks for any installed AV software in registry
                                                                                                                                                                                                                                                                                                                                                        • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                                                        • Enumerates system info in registry
                                                                                                                                                                                                                                                                                                                                                        PID:8032
                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1788178689 --annotation=last_update_date=1788178689 --annotation=launches_after_update=2 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=8032 --annotation=metrics_client_id=c6bf86198deb4a07a73a0693a84ca6d8 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.8.1.966 --initial-client-data=0x14c,0x150,0x154,0x128,0x158,0x7ffc466b89a0,0x7ffc466b89ac,0x7ffc466b89b8
                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                            PID:6452
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=d3d11-warp-webgl --gpu-process-kind=sandboxed --metrics-shmem-handle=2080,i,6347268942351131090,6598984608916980667,262144 --field-trial-handle=2288,i,6245869338830682579,7444985479256297888,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2292,i,10583470760181880204,9231883977971781223,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2284 /prefetch:2
                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                            • Network Service Discovery
                                                                                                                                                                                                                                                                                                                                                            PID:1568
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Network Service" --metrics-shmem-handle=2452,i,11745658460096018321,4018888393034796134,524288 --field-trial-handle=2288,i,6245869338830682579,7444985479256297888,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2292,i,10583470760181880204,9231883977971781223,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2456 --brver=26.8.1.966 /prefetch:3
                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                            • System Time Discovery
                                                                                                                                                                                                                                                                                                                                                            PID:4692
                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater-stat-bits --broupdater-stat-name=dayuse --bits_job_guid={64300FB4-D264-4B10-9F94-FDB237713C65}
                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                          • Checks for any installed AV software in registry
                                                                                                                                                                                                                                                                                                                                                          • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                                                          PID:6892
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1788178689 --annotation=last_update_date=1788178689 --annotation=launches_after_update=2 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=6892 --annotation=metrics_client_id=c6bf86198deb4a07a73a0693a84ca6d8 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.8.1.966 --initial-client-data=0x14c,0x150,0x154,0x128,0x158,0x7ffc466b89a0,0x7ffc466b89ac,0x7ffc466b89b8
                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                              PID:7968
                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=d3d11-warp-webgl --gpu-process-kind=sandboxed --metrics-shmem-handle=2132,i,1598860187762030874,18165152414779365880,262144 --field-trial-handle=2276,i,12309706382842164539,3520734031118471773,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2284,i,2177465366764373868,12235010654850819537,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2288 /prefetch:2
                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                              • Network Service Discovery
                                                                                                                                                                                                                                                                                                                                                              PID:6592
                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=5cf439e3-3661-49d4-8435-3554f6cd5cd3 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Network Service" --metrics-shmem-handle=2448,i,17463157748817630855,443572974460863139,524288 --field-trial-handle=2276,i,12309706382842164539,3520734031118471773,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2284,i,2177465366764373868,12235010654850819537,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2460 --brver=26.8.1.966 /prefetch:3
                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                              • System Time Discovery
                                                                                                                                                                                                                                                                                                                                                              PID:9904

                                                                                                                                                                                                                                                                                                                                                          Network

                                                                                                                                                                                                                                                                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                Reconnaissance

                                                                                                                                                                                                                                                                                                                                                                Resource Development

                                                                                                                                                                                                                                                                                                                                                                Initial Access

                                                                                                                                                                                                                                                                                                                                                                Execution

                                                                                                                                                                                                                                                                                                                                                                Command and Scripting Interpreter

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1059

                                                                                                                                                                                                                                                                                                                                                                Windows Command Shell

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1059.003

                                                                                                                                                                                                                                                                                                                                                                Persistence

                                                                                                                                                                                                                                                                                                                                                                Boot or Logon Autostart Execution

                                                                                                                                                                                                                                                                                                                                                                3
                                                                                                                                                                                                                                                                                                                                                                T1547

                                                                                                                                                                                                                                                                                                                                                                Active Setup

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1547.014

                                                                                                                                                                                                                                                                                                                                                                Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                                                                                                                                                2
                                                                                                                                                                                                                                                                                                                                                                T1547.001

                                                                                                                                                                                                                                                                                                                                                                Create or Modify System Process

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1543

                                                                                                                                                                                                                                                                                                                                                                Windows Service

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1543.003

                                                                                                                                                                                                                                                                                                                                                                Event Triggered Execution

                                                                                                                                                                                                                                                                                                                                                                2
                                                                                                                                                                                                                                                                                                                                                                T1546

                                                                                                                                                                                                                                                                                                                                                                Change Default File Association

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1546.001

                                                                                                                                                                                                                                                                                                                                                                Component Object Model Hijacking

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1546.015

                                                                                                                                                                                                                                                                                                                                                                Pre-OS Boot

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1542

                                                                                                                                                                                                                                                                                                                                                                Bootkit

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1542.003

                                                                                                                                                                                                                                                                                                                                                                Privilege Escalation

                                                                                                                                                                                                                                                                                                                                                                Boot or Logon Autostart Execution

                                                                                                                                                                                                                                                                                                                                                                3
                                                                                                                                                                                                                                                                                                                                                                T1547

                                                                                                                                                                                                                                                                                                                                                                Active Setup

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1547.014

                                                                                                                                                                                                                                                                                                                                                                Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                                                                                                                                                2
                                                                                                                                                                                                                                                                                                                                                                T1547.001

                                                                                                                                                                                                                                                                                                                                                                Create or Modify System Process

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1543

                                                                                                                                                                                                                                                                                                                                                                Windows Service

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1543.003

                                                                                                                                                                                                                                                                                                                                                                Event Triggered Execution

                                                                                                                                                                                                                                                                                                                                                                2
                                                                                                                                                                                                                                                                                                                                                                T1546

                                                                                                                                                                                                                                                                                                                                                                Change Default File Association

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1546.001

                                                                                                                                                                                                                                                                                                                                                                Component Object Model Hijacking

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1546.015

                                                                                                                                                                                                                                                                                                                                                                Defense Evasion

                                                                                                                                                                                                                                                                                                                                                                Modify Registry

                                                                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                                                                T1112

                                                                                                                                                                                                                                                                                                                                                                Pre-OS Boot

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1542

                                                                                                                                                                                                                                                                                                                                                                Bootkit

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1542.003

                                                                                                                                                                                                                                                                                                                                                                Subvert Trust Controls

                                                                                                                                                                                                                                                                                                                                                                2
                                                                                                                                                                                                                                                                                                                                                                T1553

                                                                                                                                                                                                                                                                                                                                                                Install Root Certificate

                                                                                                                                                                                                                                                                                                                                                                2
                                                                                                                                                                                                                                                                                                                                                                T1553.004

                                                                                                                                                                                                                                                                                                                                                                Credential Access

                                                                                                                                                                                                                                                                                                                                                                Credentials from Password Stores

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1555

                                                                                                                                                                                                                                                                                                                                                                Credentials from Web Browsers

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1555.003

                                                                                                                                                                                                                                                                                                                                                                Unsecured Credentials

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1552

                                                                                                                                                                                                                                                                                                                                                                Credentials In Files

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1552.001

                                                                                                                                                                                                                                                                                                                                                                Discovery

                                                                                                                                                                                                                                                                                                                                                                Browser Information Discovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1217

                                                                                                                                                                                                                                                                                                                                                                Network Service Discovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1046

                                                                                                                                                                                                                                                                                                                                                                Peripheral Device Discovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1120

                                                                                                                                                                                                                                                                                                                                                                Query Registry

                                                                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                                                                T1012

                                                                                                                                                                                                                                                                                                                                                                Remote System Discovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1018

                                                                                                                                                                                                                                                                                                                                                                Software Discovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1518

                                                                                                                                                                                                                                                                                                                                                                Security Software Discovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1518.001

                                                                                                                                                                                                                                                                                                                                                                System Information Discovery

                                                                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                                                                T1082

                                                                                                                                                                                                                                                                                                                                                                System Location Discovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1614

                                                                                                                                                                                                                                                                                                                                                                System Language Discovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1614.001

                                                                                                                                                                                                                                                                                                                                                                System Network Configuration Discovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1016

                                                                                                                                                                                                                                                                                                                                                                Internet Connection Discovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1016.001

                                                                                                                                                                                                                                                                                                                                                                System Time Discovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1124

                                                                                                                                                                                                                                                                                                                                                                Lateral Movement

                                                                                                                                                                                                                                                                                                                                                                Collection

                                                                                                                                                                                                                                                                                                                                                                Data from Local System

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1005

                                                                                                                                                                                                                                                                                                                                                                Command and Control

                                                                                                                                                                                                                                                                                                                                                                Exfiltration

                                                                                                                                                                                                                                                                                                                                                                Impact

                                                                                                                                                                                                                                                                                                                                                                Inhibit System Recovery

                                                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                                                T1490

                                                                                                                                                                                                                                                                                                                                                                Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                Downloads

                                                                                                                                                                                                                                                                                                                                                                e5a8f54.rbs
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Config.Msi\e5a8f54.rbs
                                                                                                                                                                                                                                                                                                                                                                • Size 931B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 04ac7b330a1d46761bd9dff6e3f3622992930374c6850dd5f30a46906cd7d940
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA17AE.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA17AE.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5afda752eaae76b464163148959547cd7a718c6983795b92830b2808c5f80501
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA1BB7.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA1BB7.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b62eff223f325f293ad3839624183383ee971d744392d383f39ac68c358a55ac
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA23B8.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA23B8.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3f526b38555b3bd82c4532da45b19ae5372f8db29b7e465b2b05a44f254a4b58
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA2B99.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA2B99.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4588eedf9b8a52e43dc6cb0e2953ae1ec6995d08cc7182e5e8ef9e991f8cb4f1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA338B.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA338B.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f75929b2652dd46c0eb386d7ff2d1af624cfd80e99b928a6d25aff33911eae76
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA3B7C.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA3B7C.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 26KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 aebefb94b31f900f90a4e365903eefbddcf97d84b3bdae67616f8f7716453471
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA436D.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA436D.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 045340b173f41639c88bba90fedafacee77132bdd12a152d8f41c81f47e3e981
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA4B4F.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA4B4F.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 72ca679f655768fd996b37fbc24047888bd0968016ef974172b1e426145817d5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA5340.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA5340.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 81f23b74bec9a0cc6a7fe70bcdd567b72b62e0dfe6b5dfbe8aad953d92f7e7b1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA5B31.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA5B31.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8a647eba1c52bcbc7ca94fd67225698089f47728601e5fff4260a93a0518318b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA6322.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA6322.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 81dd5264f0def818a12a3d8adfaebede3e8c0023adecdf258b914a76c1196b42
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA7305.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA7305.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d667e5dfac540c855a7239c2760c4454f1befbcc28209ef4307cd695a6db9c6f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA7AF6.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA7AF6.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3c0866b774836f4c1b9e74a994685f305175c2f8b8348e8fd9ad5c54029d7216
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA7EFF.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA7EFF.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 069789dd56d26767e65ef0323bebd32b82225ebe8bb7dffea31ed95d759c0ee4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA86E1.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA86E1.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d5cefcaa3159e76dab352916118fe9b6287c1ec38ab23038128305d09b242d1c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA8AEA.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA8AEA.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d587d305c7e2e8e306d713e45a3237ab8969f175412b8e5a7f874f63a2674400
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA8F03.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA8F03.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1655ee5ccad35a4a0e419e9b59cff780e4cda6571cb2571e0122d249f915425f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA92FD.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA92FD.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 36KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5332dae5d50e16b97a9c5e66cfa984caa99c6eacfc44d437d8a49e195845601c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TA9BB0.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TA9BB0.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 729B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 673507eb5d2f5e6b542409d98dc0c7b14a86017c147874716a88be17f76969b1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TAEC52.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TAEC52.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 951B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 72dfa43f67fb96ea7e430827fab260524df52d9889bcef56078a7d36d3aa71ab
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TAF24F.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TAF24F.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 dbd64ef7a74e799b0f8d6389c29d5975641ef123c6e4b92471638069f8c990f4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ~TAFAFC.cab
                                                                                                                                                                                                                                                                                                                                                                • Path C:\PROGRA~2\360\TOTALS~1\update\~TAFAFC.cab
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b82b0a9135e3b270c7547d179045ed72ec59ed37c2bcfc79bb4598e68ef6a816
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                config.ini
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\config.ini
                                                                                                                                                                                                                                                                                                                                                                • Size 178B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 92ea7122e8448ef624b65d8433744de6e2413e5bb42b77762160aedbb9010c64
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb000.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb000.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6754da32876a05569901b54ef2ba69e4ab9ebdd200886c10769a1e64a6bf7761
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb001.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb001.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 40KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 df86af7463df1cd1dfcf55be10d44c6c6eb12fb2471bb7233fc3c98b4d848a76
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb002.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb002.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 42KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e1a3ad48fa1b615f13890fac61e4a757133c26c063911c5412718aabe4c778c0
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb003.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb003.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0697ea19ee6f6b6f0869a2bcad9e36370337d3bc961f0a51ad41a1013de95e5d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb004.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb004.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 42KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 17d04f1615ee9e6b6b8b27ed6b647e99aa2e1c1dc66d842cfee22004fd0d944a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb005.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb005.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 44KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 142bdace953f755d124f98badf73608342917da1978af985eea12c040490ecac
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb006.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb006.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7bb79dba0de9e6b02dd9e3b72ef41dcbb43b55318b62270762c6da12957b6625
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb007.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb007.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5380185856855fb9d949c5c918330f1970df2492372ccbe776f9975a35fb9efa
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb008.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb008.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 46KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7422c83acde3358feb48a6e5757333c1211f8b340f66af1096f1fff874cf182a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb009.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb009.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 40KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2e66ed4987c07a5c5e0e9f0f75e651e913ff579a31ccbb80d92b338601d16ec7
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb010.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb010.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 47KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e04345a39a3c69c716584162a6f3537fb231995939c8897d4db731866cbda94d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb011.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb011.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 47KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5e36aaf49907de5ed015b573a3da00f154628339a350ddc16b3fa6921bbd461c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb012.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb012.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 47KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ffea785229217e1780ebe4fa5ceeab294d20c46395e765d6e4c2b114465b03c7
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb013.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb013.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 48KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9d6325a29629b51aa9a2048f9b53c8856198e3ee48243d81d95a9d52e072c2e9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb014.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb014.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 48KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 01e98769745b8f0080a8215143814f33ec18dff4b051fce024555fc0ca5dafa5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb015.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb015.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 48KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d70f7452d4563a44dfa953a2f693ff092bc86a5aa16301abad7a20f75390c64b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb016.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb016.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 48KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 72fba9e722d85c609c090042f6a272edd661f75cab8ed6bfd9cdf365fa5af0f7
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdb017.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdb017.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 45106925f699f32c34abc9c6bc106bdb8dbc3b3e5e7ce1076ddf6010454a4028
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdbqvm.wl
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\deepscan\SDEng\Plugins\wdbqvm.wl
                                                                                                                                                                                                                                                                                                                                                                • Size 62KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a89924866211ff0545d66c5b884a239656d1ed8f991e0f958e88fd9221f8deb8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                i18n.ini
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\i18n\i18n.ini
                                                                                                                                                                                                                                                                                                                                                                • Size 246B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f421332fd132d8405cad34871425c9922e4a1b172d74f86b9e4e7ee750205919
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                netconfig.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\safemon\netconfig.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 81227c030e55c82ca1c8c106aaae64317b4ab5f12a2167baed5c30db1855f35e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                routertp.ini
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\safemon\routertp.ini
                                                                                                                                                                                                                                                                                                                                                                • Size 42B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c07a3ffe5e7842f2ae9d6082c91cd8f07b838f281071ea400f3494e26392c435
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                updatecfg.ini
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\updatecfg.ini
                                                                                                                                                                                                                                                                                                                                                                • Size 243B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2768290eeaf31160c14bdfac00aff4d746bab4e6ac291da024028816279697ec
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                updatecfg.ini
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\360\Total Security\updatecfg.ini
                                                                                                                                                                                                                                                                                                                                                                • Size 47KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 20a1e658b15e0ab13db23d4ff07fdb4c60327d75537c971ddc7ece08de1863f9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                netconn_s.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\ProgramData\360TotalSecurity\Logs\Administrators\netmon\netconn_s.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2fa2fb14ee6ce53e1ef124805d62cd15f3b7142514aac89109162051152db24f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                                                                • Size 6B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                BrowsingTopicsState
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                                                                                                                                                                                                                                • Size 414B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1bfa52f409f7afa346245a4d08cbfb24b7290c981cd79b59354987b888a64150
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                f_000034
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034
                                                                                                                                                                                                                                                                                                                                                                • Size 343KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 07afd00bc6b13e35f702104aebea04e61d7f90b8447559279895e5f72cabd471
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 325b5fd21ae4ebe8727b22dbb08921d2860f7b5998bf1b4faf5a51a803a0aaa1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 168B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 470ce0fecb874c2b8c4a38879036bfcf2b3a836bc66d8f715b1d6cb5717c6420
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                data_1
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
                                                                                                                                                                                                                                                                                                                                                                • Size 264KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3a1dff80ea38cbf77cfea043cbab2058deb7810bbb8cf1078baaeb916d8420c3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                CURRENT
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\CURRENT
                                                                                                                                                                                                                                                                                                                                                                • Size 16B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 73e27b441616977a28bb551da2b0b202b92069aba663c87f6a1870ebb9a65c3d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d39ceee710a453e5eb0f539ae52c1fd20580554cf15f0751474168245bb96cb9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a42337f646ae1201eece4cfec63fb741572a5d288a7106bbe5ada9e0490b9d76
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                TransportSecurity
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 eb0f3f3aff6532852f07ae04d8cf129d4cb4a950156eb48605eefb2b1e9c205d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4aa7d1791996719eea6476ad8f5c08e68dd21e33458a856ac5ef873823a0a352
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 04d1fae9fbba697e5ddf0e9c52f93399eb170dc6b0574cecfd0d9782c78d78c6
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2747595bf13412c2c856bec346155e585c91eb7690648cefc89f511608e2c03b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5019dfba19c15ef7e030f8620203c965af37b311d4d13a0e976674ef6300c5ef
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4a8de811b93ad52e9d4022e9fa8a9091cc20b5ffab88a1e0f530f17ec1f4af83
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 144B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a0aabf4d0356905a6c77acf9889dead7e2436e92f2209915bb5f38f722a92730
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 120B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f6a0a8d8d279c2ecb5d9b62db1e3021ebb1c8852f918e3b005a1525e5a4943ee
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index~RFe58b522.TMP
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b522.TMP
                                                                                                                                                                                                                                                                                                                                                                • Size 96B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1cd59ae9bbf0b704ec4a48b7c47f2ba75b8a6a66d069dca8c8e857aeaffab220
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 96B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 de56aa247395c6d6d0b1be08037bdd1f079941c8b47fce86d40bd15b2048b03b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 115KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1da8462d528948d583b35d3fa28a4c7faa857ddba75a2819e3983523e42d76c8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 116KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c7b8b29e1f439ff26f96b2e3d8dae61621db89eb509c36b115923aa2aadf1f53
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 116KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 abf1f801c209c5dd836c5674245c00a0dd2a14c38c878091f7d1808d22ee4180
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 116KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0f137733fa6682f5bc5c0d8320666a3561ad818f92e5c98c635351ba7f77ce11
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 117KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 368017916a3c894e4baa7abb90ba21b43785d2caa8a6c9ce801bb946ebc8dc78
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                a60c304f-9d2b-4778-bb4c-cd917345d26b.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\a60c304f-9d2b-4778-bb4c-cd917345d26b.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 156KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f841da5b7e5af703c0cdc26195d30f3e4bb6dad99eab2a5641624f9c83b608da
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                blocklist
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                                                                                                                                                                                                                                • Size 105KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 135ce57ceaebca6a698a1d7483671c79a14a412e3a2073a9ef6695fbe09aef56
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                settings.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 25702f00b9ae3e59191c9934c14d23ed967e0529851788b808888646dea4d732
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                settings.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9991c48ed8914879dae4effcec150d36bec17d010668f447d8f9cade2568ef52
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                settings.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4c8626c2a708930cd5b5cdd626b8e06e5c0464243d571fa54a65fe1c0e21dc9f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 21677eed945419f29d861f9f73cf74c0796be2588248e6c8f0c8547fe5fa9f9e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index~RFe5b8ab8.TMP
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5b8ab8.TMP
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c78d5edd58204618600c2dd67003e25174d6223fc21423ac3621f442c89161c5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                SiteList-Enterprise.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Edge Profile.ico
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                                                                                                                                                                                • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 022a59cb310ee3eb75e147025e6f7864cb148d7964000b37c92ea01c44606a74
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Size 111B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Size 111B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a107efbedb7e5de3eb55c1e9b43d49cf5751c3cae802eea4ee185a2e7511072b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4dfcfc3d10055b687718bb3bb3c5208a7499f9dff45eb2a7a297b4fdfb0ff219
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 202cdbc294a2379e552632f1f7db8c44f617a863bc8d58fd963eaeda4ea08293
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b8f3d8fc3501718b73042f6192cf0d0b174ad0fe8189c7e82476a998da249395
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                sync_diagnostic.log
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 90716d28512f24ce190ab1de625a1149e05e6387be196fcd8884be40f21f4940
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5cdbd5f11db99b8f9b7c6ba1fc229195338ae8b3e44e179e0747b57ddf5696b2
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2a0f36d9fdd5abbc2a13e87fc9e0f0fa418e71281240d7c0a0140006bc5d1ecd
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c7e582d9cb78368ab7f05caa09b5dd1a0171233d65419b6b8918952f47b0e30d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c91865ae75333d8b1f386cb36b3ca48d58134613fe6240d0254b23681e8cb84b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d70e086e312a3715434d4eefe809b54ffa41e3a56275c333bca21d38b05bb92a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                60357ee5-0cde-47e4-b1e4-301e458ac889.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\60357ee5-0cde-47e4-b1e4-301e458ac889.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 13B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                www.ya.ru.ico
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Services\www.ya.ru.ico
                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6bb91f1d74389b18bce6e71772e4c5573648c1a4823338193f700afdf8216be5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 38c48486a39dc00001c7ea795425229cbfdcfe129a4323c61e557f1d3a3bd918
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                iconcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 419fa3e0326db50628b0dcbd1c756cd30d3516bc07d523a591907dea8461b43f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                iconcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                • Size 56KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 91847e881fca799adedc4773f7e6c48f518c1d9f1746d2f8688093f3ec7a59ba
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                iconcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                • Size 56KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1ab94eff45f1983849b4b6422713e1f3f7f14f7498efa9f79b4b64d9af2d32ea
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                75446dd82a6b2531f3dd5d9b170fc446
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\thumbnails\75446dd82a6b2531f3dd5d9b170fc446
                                                                                                                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2435c0376fca765b21d43e897f4baa52daa0958a7015d04103488c606c99d1d3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                data_2
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\data_2
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                data_3
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\data_3
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                vk_swiftshader_icd.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\vk_swiftshader_icd.json
                                                                                                                                                                                                                                                                                                                                                                • Size 106B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                installer_prefs.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ab6a7d534152cd777bb49a270501e7aa9d4dd11666c3aac8e712f61ce7361d4d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                56f21b160ea6db02f0d4efcccc0583b2.ico
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\fnfLauncher\56f21b160ea6db02f0d4efcccc0583b2.ico
                                                                                                                                                                                                                                                                                                                                                                • Size 66KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 55bd6a90fd2750d5a2b7221628c8afd310c218e35e59c61854f7b12680325676
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                629a008f6df9f0aef949932489c1c744.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\fnfLauncher\629a008f6df9f0aef949932489c1c744.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a6967e7a3c2251812dd6b3fa0265fb7b61aadc568f562a98c50c345908c6e827
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Atomic Heart.lnk
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\fnfLauncher\Atomic Heart.lnk
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 affab3c2f83ae2e1d82bc59ade3499a7df128f71479c999d3e7d597fc4eb4e1a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                War Thunder.lnk
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\fnfLauncher\War Thunder.lnk
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0dd9ce2a1f7b7da3af15a1e2080a3c6040944b42cc0cbf06e8a7e07cafe723a8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Warface.lnk
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\fnfLauncher\Warface.lnk
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e69359aa3dda121ae207b0623759f9d1eaf4aaac2809aaab0765efcb315c3e09
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                cff8157592252226c7c8b09715355ef1.ico
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\fnfLauncher\cff8157592252226c7c8b09715355ef1.ico
                                                                                                                                                                                                                                                                                                                                                                • Size 137KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 49424d629656fb96b170dae7caa671ed5d746e8094addfca183cc859eec62b87
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ebe23017f24d6ccb3172badab9457e62.ico
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\fnfLauncher\ebe23017f24d6ccb3172badab9457e62.ico
                                                                                                                                                                                                                                                                                                                                                                • Size 66KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a6164c4bd23e328ec8b9f3715f5959b53256b40124a99b23b3b9682b55859db2
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                fnfLauncher.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\fnfLauncher\fnfLauncher.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 3.4MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c509b8bafb5cb1e337cc8920f7ce7573aa27a5cdd69b7a0d124e389f6fd53617
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                [email protected]
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\[email protected]
                                                                                                                                                                                                                                                                                                                                                                • Size 655B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1a49a40421afdc4f54e6f3bdf547842a6ee5b611227e338f9331bc048c8318af
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                setup.ini
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\[email protected]\setup.ini
                                                                                                                                                                                                                                                                                                                                                                • Size 830B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c0da9994cb4b069483eb8c1a63ada13978426e4b9eabe6a6c21c835efed21224
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Opera GX Browser.lnk
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\Opera GX Browser.lnk
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 170198e98e5ebaba37f8288f629e82971080c4574e4e249ce6a863231caa09a4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                additional_file0.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\additional_file0.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 2.8MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 70f1b1cbe5162fd8842c441779ef4d59de6b182d1448fc6285c6a73ae3033fc4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                                                                • Size 230B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9a6061126912153d8e8e2778a6c14fc2627845f857c0ea7e6439c1d0754e0637
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                                                                • Size 245B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 086f21339591beead8470f1ad9a6c29d88d141139f33b2e22b353249085967c3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\907478f1-96ec-4ab1-934f-682440189860 Opera GX Installer Temp\opera_package_202608311744442\installer_prefs_include.json
                                                                                                                                                                                                                                                                                                                                                                • Size 976B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8f74d46a4c67032f5e3a781f68bfe8a91c2c28f588dfc67273b11d4ab81c7e4b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                005d089e-61da-41a2-80b8-28938bff6673.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\005d089e-61da-41a2-80b8-28938bff6673.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 35d78e805a910aad7462893e050376f9d18dbc73c592b4742e6ada87eff3f06b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                04527737-603f-4237-b47d-0845b603c102.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\04527737-603f-4237-b47d-0845b603c102.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 4.5MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a0adcf75c407790bffcac773e97ec98c4ae15791cae3f906d03d1907aaf672ff
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360base.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\1788178582_00000000_base\360base.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 1.0MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 58f13d919f44d194827b609b6b267246abc47134bb202472c0dfe033b9d7ed73
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                7z.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\7z.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 898bf5db34d9997b3d90b87091f34ae4e3e9cf34b6f2ae7fb8fd86e8a1bb684e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360Base64.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\360Base64.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 1.2MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 80765adb886050b0f87e30fa62336985db67c09b25f4d1760194a28ff78899d7
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360DeskAna.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\360DeskAna.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 223KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f78eee64134aa2fca1d6eecaa8ad2c3bf9e54c232554525ac4783768daa677e1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360DeskAna64.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\360DeskAna64.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 217KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 48b9596b3c7b1af2c0c5cd62a815f7e43deac03ae3e91da26e8dec2891c915be
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360NetBase.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\360NetBase.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 1.5MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 109b4add80e1cb1dfd0ab865ce2866faf1041ca63233bbc28facf1ecda8e7f23
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360NetBase64.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\360NetBase64.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 2.5MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 141dd028fe317f2d18e4ca58d767ad1eda6dd81170127d3ac1e3aabed8072d97
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360TSCommon.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\360TSCommon.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 560KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b4b5cc76d7f55a735c85e7a2b2e410d1f8f396e093b5db7f233db36a5c8bf31a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360TSCommon64.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\360TSCommon64.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 687KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9411223780006f5d79f53e7f5b7a4ba4380e7aaf730c3e99689aab6e14cc9437
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360Util.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\360Util.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 692KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a0f10afbc59b83886e29310e3c2302b34a83bc83b29c76791907be4417a32ae2
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360Util64.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\360Util64.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 864KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4b3743a6523f5ac849af013e06655bd06e77454e24f2729d017bd664636a77b8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                CrashReport.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\CrashReport.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 170KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 07ed1d3443e7f9b2531aaa0b957a298ea6c5c81bcd321e7faf25a17a85063169
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                CrashReport64.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\CrashReport64.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 199KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 09eafeda04f79fd1faf273efe104e877b719fb31689838aa12a3e6d3384a3da4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                DumpUper.ini
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\DumpUper.ini
                                                                                                                                                                                                                                                                                                                                                                • Size 255B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4e3cf28ef3ce5b806c632f99482560a5246de9f86aafb7a47cdc78e5b4b019a5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Dumpuper.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\Dumpuper.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 1.4MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5f21575642ecf7d38be30aef50be623f74dc3644603e0cb48d1b297ae2066614
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                MenuEx.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\MenuEx.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 315KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d14d7de52c5749549a17e7614bd3df8278e8595ffca4110e6289c56a21eea6dc
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                MenuEx64.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\MenuEx64.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 388KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 11294e063fe9a5d5b6019a39b48bebb75f536e27ff92008c85e9357c95805b80
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Sites64.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\Sites64.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 2.1MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3d3da3b68ae798c17dce86bd245283627689e6f6e975647472e9e0a399455152
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360desktoplite_config.xml
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\Utils\DesktopPlus\360desktoplite_config.xml
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e4bc20cb89a35695f6a154adf9f2da9b9e6e548c49dd08cbc858995235f2503b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                DesktopPlus.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\Utils\DesktopPlus\DesktopPlus.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 3.0MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b48d941178a82c3738f8365254123f4a95ad8794bfcab17d91961616795617b9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                DesktopPlus64.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\Utils\DesktopPlus\DesktopPlus64.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 3.7MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6af68447c5373307af410bd15975126f76dc40fc9815efbb0843b99a38b75baa
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360ScreenCapture.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\Utils\DesktopPlus\Utils\360ScreenCapture.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 668KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 234184ee1c37f28ef75a950501e91d6b55c829f66b96696a1a8e83a09bdbe883
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360searchlite.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\Utils\DesktopPlus\Utils\360searchlite.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 915KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 81399a7379aebbbfbce8d8cbc2d482ca04c38ddc91919ae5c6ee3a0f8fb3ea9b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                search_file_type.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\Utils\DesktopPlus\Utils\search_file_type.json
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d1b7bc9a125cf0ffc0996bdedec5e1fa724212fab340103ceb5bc1be3c25e686
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                bell.wav
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\Utils\DesktopPlus\bell.wav
                                                                                                                                                                                                                                                                                                                                                                • Size 156KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 effc1ca8846a39001e410b2d8351b76be093342d139b332aa6260db01ac820d3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                SysSweeper.ui.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\config\lang\de\SysSweeper.ui.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 102KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 794331c530f22c2390dd44d18e449c39bb7246868b07bdf4ff0be65732718b13
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360searchlite_theme.ui
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\config\newui\themes\default\360searchlite\360searchlite_theme.ui
                                                                                                                                                                                                                                                                                                                                                                • Size 146KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d83d1bf6aa9a21b4c57973548450b3b2da43bdbcb2e1af04e3aeabdf9d3f5f92
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360searchlite_theme.xml
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\config\newui\themes\default\360searchlite_theme.xml
                                                                                                                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8e5583274cbaca5d557bd095cf739a5b5f8786337a575d5c1d5df67545befacc
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                DesktopPlus_theme.ui
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\config\newui\themes\default\DesktopPlus\DesktopPlus_theme.ui
                                                                                                                                                                                                                                                                                                                                                                • Size 2.6MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 073e7f18c004460bddf066d6a14fd53321893356c3873680cc9cf35aa191ade5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                default_theme.ui
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\config\newui\themes\default\default_theme.ui
                                                                                                                                                                                                                                                                                                                                                                • Size 1.2MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f0cdf49da353e99c69308cc654dcfbf2d9ca6090dbb97c58664be9ea26efb485
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                desktopplus_theme.xml
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\config\newui\themes\default\desktopplus_theme.xml
                                                                                                                                                                                                                                                                                                                                                                • Size 73KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0940f591cb25b4d8da7bb0651e66ea8ddc52810041bc91dd2da5723fc4367f38
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                theme.xml
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\config\newui\themes\default\theme.xml
                                                                                                                                                                                                                                                                                                                                                                • Size 275KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ba6f5a1ac81fe49c14902481eb2640103abbf914efba2bc41fcd70d7b9477998
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360FsFlt.sys
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\deepscan\360FsFlt.sys
                                                                                                                                                                                                                                                                                                                                                                • Size 563KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1c738be5e36be196c23c0d092ed1dd2e81b00158475e0f361105e0cdc9726d0c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                BAPIDRV.sys
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\deepscan\BAPIDRV.sys
                                                                                                                                                                                                                                                                                                                                                                • Size 193KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2d7fa3af97a50240dec7540e4171772912d1dbb82259ac4acf039818417cde5d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                qutmdrv.sys
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\deepscan\qutmdrv.sys
                                                                                                                                                                                                                                                                                                                                                                • Size 404KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 13c357d31eb6dd253e625c0ac1e94714260b75cf7a141408750b7e0124e94f23
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360AvFlt.sys
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\filemon\360AvFlt.sys
                                                                                                                                                                                                                                                                                                                                                                • Size 83KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 79eb282821aa728f0fdfdb07a1fba273af83768614e026bc8e371655e398bd50
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360avflt64.sys
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\filemon\360avflt64.sys
                                                                                                                                                                                                                                                                                                                                                                • Size 98KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4fb3cfbf91bc27e867d8f58081ffd3be361481e2270627825cdfd13eef50ec1d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                AntiAdwa.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\AntiAdwa.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 126KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 309d475fcbe0c3c24bfe3d22b4b3c41b1022ddb4eb8fe6e1ea38671f83573e70
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Dumpuper.exe.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\Dumpuper.exe.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 87c1dc55f5cd035c6d880d14158e0dbcd193d69cc331001ec456b5b8dfc1753f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                LibSDI.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\LibSDI.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 113KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f511a0eea52cb982c60ec2a8758007a8d83f8a36bb4b23b27e320cd9441862f2
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                dsconz.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\deepscan\dsconz.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7bdae07465d701ab2ae76fffcfcc56fb0836bdefddc7efa51011d548065245e5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                appd.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\ipc\appd.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 cde2a0834cb8b6e4fabda07f611567a392b2e4dc23f2fc7921f8b13e774da940
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                filemgr.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\ipc\filemgr.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3ebfed2b2a10b33af330aff197905437ef3970e8c944b7970c097ac0cbb99671
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                yhregd.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\ipc\yhregd.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 285b8717038589756ed43bbefec8d010fdfda1b9726606332c1e3601cf6e43ff
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                libaw.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\libaw.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 1.0MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3d1b69b19a8510d6176ceb011b71d79859c13d4c61541ec7174f344d3a77bb24
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                libvi.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\libvi.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 790KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e00a185464266fdd988edb2f4bd130b4ebdce7e064fedb45806f577f1bb19291
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                pic_01.jpg
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
                                                                                                                                                                                                                                                                                                                                                                • Size 109KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a66eb91ed6129682ad3b3a57f10a8abf45000062038abca73a78db34c6d66cae
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                UDiskScanEngine.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\safemon\UDiskScanEngine.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 649ca00ba71a5f725ce94baaa4996a8c202103b1821a3529e84c20a8d882d35f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                udisk.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\safemon\udisk.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 444B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 254161d567ed1ae96756809932715790f4bcc5851eba123bfa6942b2b2d1eb1f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wd.ini
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\safemon\wd.ini
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b0a2dd51d75609b452a16fb26138fb95545212eb6efa274f2751eb74ccc5633f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wdk.ini
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\en\safemon\wdk.ini
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a7883c05518f9d1d2af9773f19f470b25ea94a865fb4d43b9e16518c3434424b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                dsurls.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\es\deepscan\dsurls.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b0355da8317155646eba806991c248185cb830fe5817562c50af71d297f269ee
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360ipc.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\es\ipc\360ipc.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0ba4355035fb69665598886cb35359ab4b07260032ba6651a9c1fcea2285726d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360netd.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\es\ipc\360netd.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3b5837689b4339077ed90cfeb937d3765dda9bc8a6371d25c640dfcee296090a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360netr.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\es\ipc\360netr.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 912102c07fcabe6d8a018de20b2ad97ea5f775dcb383cd3376168b7ebf8f9238
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                libdefa.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\es\libdefa.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 319KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 19fa3cbec353223c9e376b7e06f050cc27b3c12d255fdcb5c36342fa3febbec4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                drvmon.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\es\safemon\drvmon.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5ee31b5ada283f63ac19f79b3c3efc9f9e351182fcabf47ffccdd96060bfa2cf
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                art.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\fr\deepscan\art.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 81adb709eec2dfb3e7b261e3e279adf33de00e4d9729f217662142f591657374
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                dsr.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\fr\deepscan\dsr.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 58KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4649eedc3bafd98c562d4d1710f44de19e8e93e3638bc1566e1da63d90cb04ad
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                bp.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\it\safemon\bp.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d81e7765dacef70a07c2d77e3ab1c953abd4c8b0c74f53df04c3ee4adf192106
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                DsRes64.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\deepscan\DsRes64.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 66KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 41fc1d658e3d6795b701495d45e8d7bef7d8ce770138044b34fbacad08a617be
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssr.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\deepscan\ssr.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 47KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 656c1ec3308eec42f541e0bf1b719dab057b11b3f549060cb059ca70d525274a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                NetDefender.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\ipc\NetDefender.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4d1a978e09c6dafdcf8d1d315191a9fb8c0d2695e75c7b8650817d027008d1c1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Sxin.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\ipc\Sxin.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 48KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7e885136a20c3ab48cdead810381dccb10761336a62908ce78fe7f7d397cde0e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Sxin64.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\ipc\Sxin64.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 46KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ee05002e64e561777ea43ac5b9857141dabb7c9eed007a0d57c30924f61af91e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360SPTool.exe.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\safemon\360SPTool.exe.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 15164d3600abd6b8f36ac9f686e965cfb2868025a01cded4f7707b1ae5008964
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360procmon.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\safemon\360procmon.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 106KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 51475f2fa4cf26dfc0b6b27a42b324a109f95f33156618172544db97cbf4dddd
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Safemon64.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\safemon\Safemon64.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 52KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 129a7ba4915d44a475ed953d62627726b9aa4048ffcc316c47f7f533b68af58b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                SelfProtectAPI2.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\safemon\SelfProtectAPI2.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a71e57cafb118f29740cd80527b094813798e880de682eca33bfe97aaa20b509
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                safemon.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\safemon\safemon.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 53KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 110914328d4bf85058efa99db13bfec2c73e3b175b91dfd6b41c6fa72ebaa103
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                spsafe.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\safemon\spsafe.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 61c130d1436efba0a4975bc3f1c5f9fdf094a097d8182119193b44150344940e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                spsafe64.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\safemon\spsafe64.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9327e539134100aa8f61947da7415750f131c4e03bbb7edb61b0fab53ea34075
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                nptswp.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pl\safemon\webprotection_firefox\plugins\nptswp.dll.locale
                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 09d58a2f0656a777a66288ac4068aa94a2d58d0534328862b8371709eab2003b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                appmon.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pt\ipc\appmon.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c308ee41e48cc498c396a2ccbc57b7d29d058dd145f9867887544cb74112d63f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                filemon.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pt\ipc\filemon.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a3cfc3c8f95f0ed56306d28ac87408f10875c43bca7778c6e1cc18c7a3441183
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                regmon.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pt\ipc\regmon.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 dab50e3c2787808beeb0b377ad7c3de2c518578b9f7a4ec4ac29063d59c00b3d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                wd.ini
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\i18n\pt\safemon\wd.ini
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 de1d0fa92911957aeb41a68403b53e96d2b8294a4bc6c3daca4cc2876fac1d8b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360Box.sys
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\ipc\360Box.sys
                                                                                                                                                                                                                                                                                                                                                                • Size 218KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f3f3faa4a6ba4e81271e25e99badf4318b84637784d563a84a017c5f46ce291e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360hvm64.sys
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\ipc\360hvm64.sys
                                                                                                                                                                                                                                                                                                                                                                • Size 449KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f89d5d95b8a59e6d5e50a49217f83d080e4eaf4bb77b80d8f38cd915640ba124
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                sites.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\sites.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 1.5MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a1a1041cde7a0c8cc71eb3faece1b82bb6f8cb407cdccd0cb50c882a429cbac8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                MultiTip.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\softmgr\MultiTip.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 1.9MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ae601527a00fc5b72aeebde2305aec93eac9b9a0706393c763577ff510542d2a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360FastFind.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260831174632_240923468\temp_files\sweeper\360FastFind.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 226KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 45a9d2180bc3a6c5716a5ccbf74b14d9e91fa706449aae4046c0835cc672f5e5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                4196e124-3a4a-489d-add0-a5fc5e67422a.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\4196e124-3a4a-489d-add0-a5fc5e67422a.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 472KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                7ce72d5f-9bc2-4987-9dda-3c6011ac837e.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\7ce72d5f-9bc2-4987-9dda-3c6011ac837e.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 1.2MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3db075e9f1b9a356bdd15c2aa205cac841db963d40b2c8ac834d9d659398bdc9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                installer.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\7zS07911E3A\installer.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 9.1MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ce0afbd8f8cd1a36958b3d0bc8aa78e8c99c7861bab067a67821f77728be608d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                lite_installer.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\8D1DCA38-0638-4275-9603-7D740E711E98\lite_installer.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 419KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 688d0b782437ccfae2944281ade651a2da063f222e80b3510789dbdce8b00fdc
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ADVPACK.DLL
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ADVPACK.DLL
                                                                                                                                                                                                                                                                                                                                                                • Size 129KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7735dfb067c97033031d45593c320d1229f3acba896c1a4e815a2d1bfd786b11
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                rootsupd.inf
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\rootsupd.inf
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 94fe83c96d71ca4e80b7426af32c7e02b784d6492b7b16405114b04f4ffc5464
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                a4de6d9a-93af-4db0-8464-701cc6b171fd.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\a4de6d9a-93af-4db0-8464-701cc6b171fd.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 1B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                dac8f859-0e38-47c3-87ab-27a5399042aa.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\dac8f859-0e38-47c3-87ab-27a5399042aa.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 46KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0443bab24dce89bd68e06dba7f4335db89e70cf99ac92a0919d5df35a2c3cf93
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                FF01_Game set updown free.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-SWBEWJNG21.tmp\FF01_Game set updown free.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 4.3MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 53afdaae737db48f3b04c61181af3dbf6c7992b7f5a032691a3fd026272932ff
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                7654b78192938f446f1dbd6f0b83d907.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-TQP3MYM1TF.tmp\7654b78192938f446f1dbd6f0b83d907.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 3.9MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 591393974ec51707cf7aac82425cb1929cc77814f041771b9b9634a8d51a9ad2
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                b1f019abfb569686930bbaf6540355b6.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-TQP3MYM1TF.tmp\b1f019abfb569686930bbaf6540355b6.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 1.5MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 452b8ea945bb5dbdd7b06090fd44abed24e6a77ef0d5a6825b278c9f2f424d10
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                f1a2d1824bd6abe3b5971e5f0e9ebc49.msi
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-TQP3MYM1TF.tmp\f1a2d1824bd6abe3b5971e5f0e9ebc49.msi
                                                                                                                                                                                                                                                                                                                                                                • Size 9.8MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d03e799b6c66455cc0083fdaab769b49dfd2d33f412243e11fc225e34a513a81
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                lite_installer.log
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5922c62769dcc39aece8d83165681c5f139cdb12d7ea61c0f3b9622cc4d44643
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                master_preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\master_preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 664B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 49b1c95ff383ea23d0abe82172d06613aa6177985752141683cee55a5b677937
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                content_new.js
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3948_478305824\CRX_INSTALL\content_new.js
                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                favicon_opera_one.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir8528_1122019291\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                icon-57.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir8528_54158073\CRX_INSTALL\icons\icon-57.png
                                                                                                                                                                                                                                                                                                                                                                • Size 873B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8462b976325b85e3fe1140685159792a700d5382f2307d5eb667af10e76d8964
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                vendor00000.xml
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\vendor00000.xml
                                                                                                                                                                                                                                                                                                                                                                • Size 510B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d7fe7dd26220da565a4363eada9190875665e8286fa45b2182d1f9231146862a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                yandex_browser_updater.log
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\yandex_browser_updater.log
                                                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fb32c4daaf270ca6dde5a2292759a4a8634b58df44e5297d74259eb125b6a05f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360P2SP.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\{0E8779C5-D3D3-44d7-A8D7-A836AE21BD16}.tmp\360P2SP.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 824KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 bf1b96f5b56be51e24d6314bc7ec25f1bdba2435f4dfc5be87de164fe5de9e60
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                {4516D6DB-EFAB-4E58-BE96-B20DC54DEDC9}.exe
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\{4516D6DB-EFAB-4E58-BE96-B20DC54DEDC9}.exe
                                                                                                                                                                                                                                                                                                                                                                • Size 12.0MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 116fc2441dced8e43c82ae7477f614f0196043c3a583649fd4f6e1270777294d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Yandex.lnk
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ac036e43009053a82e19e9d9436364306305a946aad49b1d378cc3c78eadca43
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ru.bdic
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\YandexDictionaries\ru.bdic
                                                                                                                                                                                                                                                                                                                                                                • Size 4.5MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 af2bcc135f974aad505a8f55296117dbf4cbc095931e22f424698b181d273656
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                brand_config
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.8.1.966\brand_config
                                                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f36100c007a5a3c92b39ca17ba9c0596683833415e0458f2848349cf0968388f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                partner_config
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.8.1.966\partner_config
                                                                                                                                                                                                                                                                                                                                                                • Size 341B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 82e288090168abe15419015317fd38f56c1136e7481f66656d84e0a2d861d4d6
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                all_zip
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.8.1.966\resources\configs\all_zip
                                                                                                                                                                                                                                                                                                                                                                • Size 1.4MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 24544cd3bb30e57ad160c83fa3608b5292a2f578b921d6fb11035f7246bfb39f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                light_static.jpg
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.8.1.966\resources\wallpapers\light.title\light_static.jpg
                                                                                                                                                                                                                                                                                                                                                                • Size 674KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 16df6e2f9e057ce2e90981f8dfc026d5deeda9266147256fbb787eb27e2f3ee1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                sea_preview.jpg
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.8.1.966\resources\wallpapers\sea_preview.jpg
                                                                                                                                                                                                                                                                                                                                                                • Size 59KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f60c331f1336b891a44aeff7cc3429c5c6014007028ad81cca53441c5c6b293e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                sea_static.jpg
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.8.1.966\resources\wallpapers\sea_static.jpg
                                                                                                                                                                                                                                                                                                                                                                • Size 300KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1605169330d8052d726500a2605da63b30613ac743a7fbfb04e503a4056c4e8a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                settings.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 76d17582630d14af1e57389e2618ab9001939a084f34724230bcfde0cdb8ae0d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                2779bbc1-2775-47e9-96b3-203af6f17b66.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\2779bbc1-2775-47e9-96b3-203af6f17b66.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2bdab65b933c396eff3ed550e21f9bb5b7f5973a9f38fca39aa9c6b87b0668d3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                8c057772-108a-4c75-975e-68835dc14f69.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\8c057772-108a-4c75-975e-68835dc14f69.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1c5baad4f8899e02567d2dfe69fd5843baf73c896552229614acc54f76193315
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                9312d2fe-8a53-4aeb-a540-44a440d228f2.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\9312d2fe-8a53-4aeb-a540-44a440d228f2.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 143KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 46230039f349c078bb05a8a2f930cff77fe65efc60e3aaaa77ecbcca0ca391d6
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                f_000004
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000004
                                                                                                                                                                                                                                                                                                                                                                • Size 40KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5895185cf878a38cd172286ed97976e6ab620b2c5fd7f7810f9c9d2f7169da6d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                f_000006
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000006
                                                                                                                                                                                                                                                                                                                                                                • Size 48KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 18539e5632dbeb12467c472ed06bae43a3f893eae4db6daf11d0485585655e44
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                f_000023
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000023
                                                                                                                                                                                                                                                                                                                                                                • Size 48KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b3cd587a747007fc5a365ceec5daa964c559e4862ae70aa98f5d0e1849d5ddf0
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                snapshot-new.baf
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\No_Vary_Search\snapshot-new.baf
                                                                                                                                                                                                                                                                                                                                                                • Size 20B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ce60507b-bd34-4158-ad6a-af7ed1fe400e.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\ce60507b-bd34-4158-ad6a-af7ed1fe400e.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 24ca38ce76526c291e38859dcbda78c2b0c6ed51ac8249059df392d99ca2feb5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 792B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2869aa33057b2e435be2b14a20728ce64000af3f3397f04ab34216fb402e0721
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 480B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 aeb65dc3fabdda561e9ac72b6a287aad067898b2fa17a69bbf2268510e6b50a2
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 370e4f37fa172d9cccf231bad724096a15b7005c6608d89447cbaf2a41411cea
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 aba75a9ae8b0ab867bc3faf4751ff7d17cc9bf91fbde3e584483bad801be77f1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 91e794f3e2821657364b9f7f4f8dfbfe544be9fc52f5482818be0c5276f30eab
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9eba10f67442eff8c4ab3a32ab45ab9c82a026e7db266c9e022f537ec4b2d561
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 30af36086992ceafbd2313bee382533cc74dd4b7778f67c42b797cf767e0c8f8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 31f253d7e3b0d58ffe1dd4ca45f9ce6fd1e2dee96b17b3f6509a23e5da32e8d4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a56cf04ef13e1dabf9948df8f18328da5c34dca870415379864442addfc10652
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b3a0713bd3729de4558fcf9b52a91b4801f308859fac5bc8352226eeef1e41a5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f01be39f5c8956a84a466a1a9538e7a0de97fb912e39a71e1b49bdd4d74d9ca0
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 811ebc9d02e48ffbe71ec376270a541ff484f02435b06e9bee263c2ffbd4ab0e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c064060ac7ac6863581f24f9d1c3a237c962c491fe2194099fdc18875df0525d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ab000ec0a47de1a23d5382fdd48ac1a3d9db0f3cab6f274114b1fa6371427bad
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 192cdc23b7d4b561a92f3ca9d51bafe1d4563bd01c53097d27d11775fd65364b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 975e391457b7c8b0692a4be975baad081863b144bfc10f7ffea0ff8c0eca791b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                d7482a22-38ab-46c9-af2c-a448e7e38df3.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\df10055077ba6d055202a286871492a294099fa5\23355250-ab6f-4ec8-a06d-d88767a5fac9\index-dir\d7482a22-38ab-46c9-af2c-a448e7e38df3.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 36cd46c6a792730a455f1be722f293677edc60b1c6b479bab3e51e080ba78e42
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\df10055077ba6d055202a286871492a294099fa5\23355250-ab6f-4ec8-a06d-d88767a5fac9\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 96B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e0797283596718096617b984f7bfecb99ee5e9f0c6be19226057d28e063860ac
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                d5acea1c-2f14-4803-84a5-f57e9a6996b0.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\df10055077ba6d055202a286871492a294099fa5\59f19c48-5661-4c8d-b0bf-5d1629938df6\index-dir\d5acea1c-2f14-4803-84a5-f57e9a6996b0.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0e1e32217b2eb0d5c3d0f7a5aa50a740b9db6531247e396e31da663db26ef735
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\df10055077ba6d055202a286871492a294099fa5\59f19c48-5661-4c8d-b0bf-5d1629938df6\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 480B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1113f1167f51f54b16b1345d14ab199349d7290c0fb1ca9048c28a1eadc25e3a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                b978203c-6447-4d22-bc81-418fc7e0323f.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\df10055077ba6d055202a286871492a294099fa5\b978203c-6447-4d22-bc81-418fc7e0323f.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 153B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 67462a4a041d2859723de19265f9d5b7f1b47aebee80b4d7ce379bae9492f9cc
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                index.txt
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\df10055077ba6d055202a286871492a294099fa5\index.txt
                                                                                                                                                                                                                                                                                                                                                                • Size 253B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b5bbb5d47fba59c6a557ed1d0af48fd200a64875a1e649de5a1caf85ac89f126
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                index.txt
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\df10055077ba6d055202a286871492a294099fa5\index.txt
                                                                                                                                                                                                                                                                                                                                                                • Size 148B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b9f11b5f480e26b229941a3b094a928665755119a209c3621dc6b2db4614fc66
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                index.txt
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\df10055077ba6d055202a286871492a294099fa5\index.txt
                                                                                                                                                                                                                                                                                                                                                                • Size 248B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6f2bc33430fafb3ade433ce499e35334951368f1211b07a9759b2319e011f89f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                28dc5ebd-ab98-4b19-83b9-a34015ec1a81.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\28dc5ebd-ab98-4b19-83b9-a34015ec1a81.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 cfdaabc08ea4cc0318e63a375618a32b012c89c700cc69fe24abb73e0b958dd9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5e5896b441e3568d35d908769c77511756e6a9a61fbbb6dfad816e009a1478ab
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 96B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 57977b8d527675955e2d5fc1744eb16f674a92d549c2a6086de981be4d61ea4d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                128.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir1660_1356616263\Trusted Icons\Icons\128.png
                                                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6f6240bda239efc7969736dcb36212b55e0c026b6e191069a59b0319a871902e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                256.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir1660_1356616263\Trusted Icons\Icons\256.png
                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4c8ab9772a662445717504802cf06755896080fb8cec679172acae975c98f67b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                64.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir1660_1356616263\Trusted Icons\Icons\64.png
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9c844d058a7125bb5e87b880dd6d73ad91473498d2840e109c8d01aca1d5905c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                96.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir1660_1356616263\Trusted Icons\Icons\96.png
                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 feba94135d0ae26db2694c294c124c30b5f7a385b6a64441d4ecadebe680ac93
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 226KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3c42f1b7aaf145c1f98741925f12b108afea5841ccd1bc37f6b06d2bb9757e6d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 236KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 12e0e756664dd6e6b35bd65819af1e992669e021fd43c03b9cc479ee051ff0d0
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                a3daba8e-6824-4a67-8a58-d4e089312896.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\a3daba8e-6824-4a67-8a58-d4e089312896.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 219KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b341820be0b0a7976707d9f1f9ace958f601614d3687b3908f2fce0cdea654b6
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                                                                                                                                                                                                                                                                                                                                                                • Size 21.6MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 572B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b47fd9c56c586b0ebc1e2923980c8bc40f0993b936d7dc6df9c2591beb80a57f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 bb0c10081b3dfd2d65caf431ad3c2840b0e9cc222bef246285cb3dc3e339858b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 1020B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 13809229215538525ec260d3df6df056fc47f4eae0611d11711329589a945fb6
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 236B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 df671539241fbc96e33ab6dbce06498e6dd1a0927a6f4c394b8f86ce27b541db
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 460B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 71e7bc5ea517aeab7e552feef455ec3efada9fe56b1bf154fab30f69208651c4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 684B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 519d2575dc6f6d2d4d03da9fdc11134320cbd9c5ec8be304f17353ce63e600fb
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 348B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3897d12af1f880ab3980a03b21b6f26c9a9693c39a1017ae7f87e742581de301
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 796B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6993a18d3b5c23e1b13ea0ff107a9b01e563b170aef2c40a1e4b5a7e2888f74f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 79d97c202c52ad9a4cdddf81ae9fd47c1694bb80373c844502ec279125863065
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ffd7c5d9-1ed2-41c1-8017-9c1e138c368f.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\gpu_configs_overrides\ffd7c5d9-1ed2-41c1-8017-9c1e138c368f.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f1ebcde8ec720a260cbd8e0d3ef3342b998d5bc22a9a480a551e578fe525c74a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                360History
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache\Default\360History
                                                                                                                                                                                                                                                                                                                                                                • Size 164KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6baef96cb91e026bf7e21354ff5523587fdf4780a9f14a2a04a48e037402d8ba
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                47bfe910-697f-490e-bbd4-f9420bd86143.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache\Default\47bfe910-697f-490e-bbd4-f9420bd86143.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 198KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 03b0618d37ae6c6387d73795adfb2cb918462977fe73ea912fc2aac161d8c303
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fcb60009fcd5d9e03fdc96930e0af7cfbb389cb38c8efc3a74762142e63883dd
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences~RFe5dc304.TMP
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache\Default\Preferences~RFe5dc304.TMP
                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f79b3234cfa5e73c42c3489e60ec82abf4aa67f73091bf37421f5c6778efdf21
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e4ed804ba450c6216a7d1f58368d057da729b277da6462cdca9a03cfdb166bb8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fb1055285f58ee8859607535ab834072cd8d61162dba6cb98ff83e7329de30b0
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State~RFe5d956d.TMP
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\360TotalSecurity\WebCache\SeCache\Local State~RFe5d956d.TMP
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3f5bf1f6c98520ebaae3e5989a40574d969949254382fa5985dc5fa71d660c6c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                60bd6454bcd9efba.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\60bd6454bcd9efba.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6ff16779bb9e72c3c21ff0d97a09b91491467440598d2f2b0bb682dc73bde458
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                60bd6454bcd9efba.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\60bd6454bcd9efba.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 66fd8b61317a77886cd65f679a435b92f26e4f617b0613c93d19fed3b423f998
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                places.sqlite
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\guliair0.Admin\places.sqlite
                                                                                                                                                                                                                                                                                                                                                                • Size 68KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b6d278384a3684409a2a86f03e4f52869818ce7dd8b5779876960353f7d35dc1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                3b7e9d64-f455-4167-af82-c1746e972721.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\3b7e9d64-f455-4167-af82-c1746e972721.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 151B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4f80922bb03ae50e496e0c61555a49de8a6b2ac79bbf88b3119fb9b804599272
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                settings.dat
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                                                                                                                                                                                                                                                                • Size 40B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d97bcd481a2fe06ca93d09adbfba82552fa879d39e7d8946c7e9fa0728a629bb
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                0200dfa4-3888-4977-aa2b-697bcd5c7a84.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\0200dfa4-3888-4977-aa2b-697bcd5c7a84.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fccbc9907d3d6f019bf730e907296cecdd7b34e70aa3cff82559515fa895402f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                1e641766-af9a-42da-8c0a-56a7e851aab8.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\1e641766-af9a-42da-8c0a-56a7e851aab8.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 171B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1191c31d1da1e0934a658671fc8bf475392f316224c6cd18ae2aa20227b4444a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                2606bd9a-9976-4fc0-8c03-7df117e4a394.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\2606bd9a-9976-4fc0-8c03-7df117e4a394.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 162KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                26b83219-b9fb-4400-a9be-e9e7b8e4172e.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\26b83219-b9fb-4400-a9be-e9e7b8e4172e.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d2595461fd8f9b277b5507a30669aa433324f28ba257fc6321366f2a821a83cb
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                2c34dbaa-5d70-4000-a212-821b973495b5.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\2c34dbaa-5d70-4000-a212-821b973495b5.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 411B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6f8bd9313fbb840bf0cd1267dd519b24c35632fb1ab79ac52683667efd1d8a70
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                88b1a264-fa1e-45d3-bb03-8a5da641b3ce.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\88b1a264-fa1e-45d3-bb03-8a5da641b3ce.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 83KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1332595213ce1a0c640a265a734dff95e84a5cbd8f5422fd5042c80615df5b08
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Bookmarks
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 edda11c20fc3ee888b75ed3530cf853cb72aadf962e1eef5050f425826f3a02c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                bc84982b-db01-4657-81eb-f37b5ca43b5f.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\bc84982b-db01-4657-81eb-f37b5ca43b5f.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 23e8018ebf6e95ae6a23c392e214fb11363560201d807a4fd50c4ea36827a0cb
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d52d2869dc250f17cceae58aa25d8b6b8589264c37d568693429fea735a53f2b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                messages.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                background.js
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                                                                                                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                twitch16.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                                                                                                                                                                                                                                                                                                                                                • Size 370B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                twitch48.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                                                                                                                                                                                                                                                                                                                                                • Size 921B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                main.js
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
                                                                                                                                                                                                                                                                                                                                                                • Size 46KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                background.js
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.332_0\background.js
                                                                                                                                                                                                                                                                                                                                                                • Size 365KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5acb8f0a54c6774e0832d8ee9c7fac2dd593b1a74c89c5f4a9ba3f12d878ebcf
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                icon-57.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.332_0\icons\icon-57.png
                                                                                                                                                                                                                                                                                                                                                                • Size 863B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7a1ae78e7cb77b74cbaefa5b92ec32384761499375738898e71bd43f018f3a17
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                logo_128.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                                                                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                logo_16.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                                                                                                                                                                                                                                                                                                                • Size 653B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                logo_32.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                logo_48.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                logo_64.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                service-worker-loader.js
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                                                                                                                                                                                                                                                                                                                • Size 49B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                favicon_opera_one.png
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\favicon_opera_one.png
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                reader_mode.js
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\reader_mode.js
                                                                                                                                                                                                                                                                                                                                                                • Size 112KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 dd4d3dfbd760159952c05355fdc4bc738488fe02e0e8dc43704e2095b6c76c1e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                service_worker.js
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\service_worker.js
                                                                                                                                                                                                                                                                                                                                                                • Size 89KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 54a79133f29c7d1da2b6cbd5934a8fa8a60bdcfef8c23e449cd04e0ccd2cbf27
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                spotify_frame_interceptor.js
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\spotify_frame_interceptor.js
                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 442264acc3e319d41ee98a0df10538500eb7914b0be345689340c83cfec1be7d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                • Size 23B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                0bd396a7-8564-41aa-820b-696d9e811e77.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\0bd396a7-8564-41aa-820b-696d9e811e77.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 074c45da62a2318ebd4fa214ef4d18a49adc0e6d5be82fec96ed5453252043e1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                1fa772a3-e7a7-4b02-8baa-dcee90645c68.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\1fa772a3-e7a7-4b02-8baa-dcee90645c68.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fb86514dfbf3c5c1dcccfb952103e2732847c8d32e3417d4db6855fb2d07f5a8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                b0abb5e8-79ae-4846-8007-6feff3ce2d50.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\b0abb5e8-79ae-4846-8007-6feff3ce2d50.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 44008c2b08ba62f5c6fd9c24682d21031962f4359f05deb76d8cd725d5b8fc4b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                bd683791-15e4-43a7-a7e3-081c947cb5d5.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\bd683791-15e4-43a7-a7e3-081c947cb5d5.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8e45e5fa5234df07fd5bd56d7bd11df437cb82a3d5f09256e5c9a9701ed2c13f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                e0ca3f5a-41e5-4f77-a70e-59f89f82a9c6.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\e0ca3f5a-41e5-4f77-a70e-59f89f82a9c6.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 77fcafcc6069a2338880a24e614d68f1950f6c503acc987246433f220932c252
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b8da03a28b8fd679e03f9f708191e95b8014a0a8fa34d81211308ba6db3339a7
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                • Size 59B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                a173a394-8efa-4d02-bafa-9d54ac464145.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\a173a394-8efa-4d02-bafa-9d54ac464145.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 59B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c257f929cff0e4380bf08d9f36f310753f7b1ccb5cb2ab811b52760dd8cb9572
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 bfab20c094870e5eb7337646e909811d566738ac0c51f3fdadf4310d947e4501
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7c3d1c7642d78c6945b08109f2fc75d8e7055573211ed4044fd11d101a54726a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 442f0c635f660663b98060360e7e2d3cb641b5cb87719685fe5b87b4bf01d217
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b1cec0db3edbe320326c50fd77ad18ed9a9e9a11f663eafd9e927db20c38cb00
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 118KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 cdcefaef3dcbac51df7fdf06825895a87f3a985f5c1bddcf12b4b598b16dce9b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 84KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 42fd80fa74a7ae66478dc13b6d1855d96e3d859117ab5ad6280871b29c8b8df8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                67a473248953641b_0
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\67a473248953641b_0
                                                                                                                                                                                                                                                                                                                                                                • Size 46KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 03f20aa21af09e24cd7c10abc089fb6d7a7c17428db3231b0272a6d166e1ebb3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                67a473248953641b_1
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\67a473248953641b_1
                                                                                                                                                                                                                                                                                                                                                                • Size 110KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2e113c3d160f31f2aa9b601ae57e21dd3a519671fdcbbc65db48d6a758e3240f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                fca5da0a-1cea-47e3-9085-3f1361db0938.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\fca5da0a-1cea-47e3-9085-3f1361db0938.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d23462da87a2aeffded8a56336526d38906654e86aec2094c845b848eefc5a95
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 528B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 aa082b7610b09c0f6baa07bf7f76ad4a80ebb86a463cc6d979684a4656ea2ded
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Site Characteristics Database\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                • Size 41B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                9f560f57-b4e7-414a-b49c-d19c2f66742e.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\9f560f57-b4e7-414a-b49c-d19c2f66742e.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 381B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f9faadb9a79959f260d0255549cbd108ff2cdd03cf7eb8057f1a50c76ab20f6b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 733B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f356310f553e8f63944a4e8e964d942e87aeb5af1faf635bfb51659349401a6b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 909B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 248e673f7643f61db8fa4dfd2542e15d2b7f1894c649e4bc08a3cf1e82156315
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0923d45f777bc51cd6c38b6a231bc4c051a72280677e2d036154ae293e6b0b72
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 60c5baf0970b2b479cceb8cec25ef2272b777801718ef4b6e455483eb87e7519
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 310e9038a21bca4b392580cdcba0bf7664b094e54b80758150b446c44d3d8387
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 aebb8acd880b4b6748143a372956a04f91855b206e5c9244df893c258f1836c8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 098584c6fcda279dec8117f27699186713e2dfeb15f413a2b5a34e5014786326
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0f8c999324a75bbd58d375a95e225968b8676c69d8db2d3c728901a97a251a47
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 30b97c8d20d9f9c35e2849b459bfa6dfcf6700d730c8a6be4aef679c7e97edbe
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a0e3694ccca842004d346982e0f7ebc39dfb68a2a76bd508746b464b13cd576b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 83001a4f29d1f72b2bffbf8b32994795b006c62451443506b023ff9db3d68f5a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4397509f0883035d59955043c1274cbd285218c0926cffd34128bfb448319bb0
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 43f0f04bac5eeb24da1b8b5e3579be04e7f9c61c9e91a4f1121b3adaa72206c6
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1ca3fe1ed43267472c9c18bccfff381e99dc573c5e8d4dd01ff3c29c9d4c2088
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 493B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0f52ef20d45e16516a7e2b301c265a795a3330e00779c78dd548621363b09095
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 33026bec11cfbe3413227a2ce7d597ae524ede6da486ed268f83d4fc2a4ed820
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ea76bc1601b438e5aef5814ca561ec7979433594255167e41a925ec7f7c81dec
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 69f3a4ed473c0c93d8043d2bc19e2f7203cf99539af099756101ccdfd38f090c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 103e021f0666b322eb09d7e3b4b3f6f32dc10728c1956ee623599a389968548c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 503f8206429df2c57d63abd762a34e3d88d55e427597da03218bf00b410c1519
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7adfcb2240c02e7dfc18f4f433e1d926fe93da3005d66885632e5c5d1a2e5e76
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 96c8363fb6b3096fea46f1660cf82f4a88242fa7330b1bddb55976d79118d4ea
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ec3efa18092b46c405046cdab4d72a17e86a893c8cfb08bbf28578d85b26e75a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 50fe4a6961bbfdc9e2fa71e76a2f3e95b6a73698dbb8da26da35833aa239529d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6dba93c75aab2a34bcfd7fa8cecd4a6c1afe7e0aae5310951ba6782599126344
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 b17928181d5a97963be84b051287cfd501df0d3ebc34430aaa3f649e75251273
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 52415d676ec8a17a15fdcd05a9b2e23933b71eeadaa1b924003655101d0e8d5a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 29ef2b68e244634e6300c69af0c3411e9959991b0e6e94e5630b0baed708a1ea
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 58ee00108ea3c994a120b6f932d01c329497ef6c2dbb81edea967bda0857ef12
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 cc4264a171766ead6e0818d9a839dac1013b85ca3f109cd83933d24c9990b9a7
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 140aed5547713c2289282bc1df71ce5c22ae89783dd90efa04ca446677ac854b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 290fbe4d375997bf0b8cbcdb03d7c1b347f1b7b821b38e51bd146f7f1eb23296
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d8fc5b6561330952f022b8347a33f9ad678ad6acc517624325e0b844baebf8d0
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8a497e82c017da9051b7a3d07005346ae3cb4d70b2664210dfa559929a8f25fd
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 af493c4677170ef1b8bff8faf7396355bc12ab88fce1010f1376b59d7fc05397
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 bce1a1751bdfb8ceffe8d97237a39f1740571dc2caad120eb6eb5517a39a3ce4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4c12200f770464a2f3768585464c7464d7b67aed5e2337eca95caf3026d48b3b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 49440d20d2fb64b236ee4b70222caf8b58e9b24cfda793d3ec6bc8122319feb8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 372dfd27f01486270c1dbdb52ddc508f9c465ea835e9326deddfde70eab5c92b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1ae824e2449f10e098de834d9106c4866c228d9e0b4e1009602005d733864331
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9a100378ae6e35d3d87f048e1e4e175811f2a57bb593af19af67ece69bfffbad
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 411b8612201b5c54dd18fdc1379d6b23f344264a4106bc16386e063c280950f3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 311968dcb7cde5cbb74ba426922a7579329c9de7d6d91a44879da5871cad457f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2eb21a79e3ca1f43bee6170abdfc918bd59941ceaba590333a3e06b6c68161d8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 925ded8a05c1570a1e66d18011b9411347c0b899113c7be792104c8d4e2e0f03
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4297a05cbb8b6f44519c16ebe78edbd898de4cc066a165e1cf8f4d75f136d744
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 27edb9872019cf33d813ac8f421ae5f08307a11debdfe0061b212e2df44dfb3a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1a55cce631f78ac2c1b11de6cb45710db0d117f8b730712065fa9628e3a1d759
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 330c69b1295962fcaefa69bae2870f17b675b8b3938475fbc82a4a9dedc74409
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 605B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 56cd0aa8ab76e926566d55d7d5258828c4e227a1faaa4d70ab0e677bf3f86b0b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c8c6714560dba33d2b37bce376c4d7fdd8a85f5b0f596cdc3232d47603b6af2c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 27bcc72a475e70bff71579a6f742954d7432c75d795b206aba02102c6a059ed9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c6c1e24850576519214374e191a92fad7efce68f3fa4209267d85114ecb53bd1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a444fb457a0066453d9356c7154fd3459c482e8a3929c5138da1572641d54fa5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 841b5e9970b804e6a30d7c8987cb250194852bc63b689372ddb2404029acc0c9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7e513fae38b22c83be0153bdafac739e1f0cf37978e31f22f88331b2d6b16ae1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0e24b064f7e5afc14b5d514099cd55ab7ff59359882b0109a148abb4ba8fbc69
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9c519d28b4ea3e0751d24f10a04376ef6af3d0ff2389a00e05e9f426a45a7580
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f83207815ac247ab45e78df809b4d1ce07e2e3d899d0bf0b13427e7a8c165a93
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 167dcfccb8d95a19cf2d7c31f7203f2b3f6f9febe5764b189def48b9a2c65568
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 48e0b39c7d37954ecf767571de5460f4fd3e52b0ee5e902341c577824768d9c9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 57f2e83fe58a8fbd081c4a673d8537af3d6abd13046efda39bf511a8622ec92a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0745e4c5cde9f7694990b096b3bb182861058e1f6ff0480b89a5f151cdd82512
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a26358eb17d7c5463a1654bd36a3e8781ae894354809d0303a80da7ea7031e68
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9e2fd2ea8a15bdd1065a6c81c7b22755375f8ef747857ef49fce081dfd682f8d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9f84af8f7946227c57403caac194dd906b5ea6b705c656343cdd359adc9bbab1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a540ee0efee3a6a341f54607dbe0ff6354b3c42b30fc0158919b4d95d8e043ad
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 bfbdbb36d62e6f8e681e7fbd7390f8d9106be46c7e153849779818aa1903fc96
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d80c7710c81331047d94cc8c1dbe6fb5fc067b48efd98afda3b9dd0e1f6098a9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d95433c890a646112815f8eeceb8c79a0eeffb9c8932e95ee84a647c2450f88b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0a27c07da9359845065319622930aef43c114baba936554a9e466f2dec66a54c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_45555ed7-8aca-4dcb-b371-89d625ac6ba4.raw
                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ed6477aba36b86a04d49dccf3b578d98acc6f49fc843890ddc25da90e1aa2412
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e4b5c564e03ca898e1c9728769db3c8979fad882e5f38b6da5d3ca965558006e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1218bd0e7a1fd81109f87e992c28e15d0039c159e2bd327aeaa2b1723a473781
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 500B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d93bbdf0646dc1c645b8e233448cc0151167a4f7198631d7fe04ad5be325ff8f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 baa0adca7859a3551b4dbec4f76d77ceee8a052bc09024ce859fcc119dc44a85
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a2b3f178c5056598fa3629cd2aa163c654f057aa9aab06cd59353b6418caadb2
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 92241d055281392e9eeba100e28a896af61bc3a01f8e310292ff4938ccf0c52c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fbc09bba0df3500dc172a2717ea20591e6b562c1538228ef6aa2c220f6db4f59
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0ef64a9ddb9d4458838e2c2f86171c24ccb55437a04b9f3cf70a9d420f1498d2
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6b85a20c08f06c5c3e9dc86c60a3b5e2186b56f63e0bc78b8d40c92c546fd9e4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 603B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 770d452db215264349cac7c4c200e0fbeecb0d4d680a6bf8d6d33dc0272eeb7d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 898B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 98ae5369a78c63e481eadd3b23c1a1035d8eadcbfede05c609b27cdc37c9373f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8b9d78a71ddb9a75b0cecb9add6fd707b9f49e015c74ab64a7ba992acb5601cc
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 989B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 afd8739bcfa667bb89efcaf259e5f4ee7ed66383591d80ecb04edabaf170f4ea
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a2c303f17f64a05a9726973a955d6db442ba07dfe872eff9870564bcebe200e7
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2036d154c16735bcb00502090d59ba5b79aef783ac914154ac471d97d4cd7a9d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 707B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6a00545b9f85f8f2701ebd8933dc7867544f1f5bc7c9000f3f94343fbafcb025
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 808B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9151216dd7d271be38f0c6a040fcd4c7261de044b3594d0fde334c322b31adc9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3b8a13b22fa4fe3233a11f4022c80ad4ae2532fb671fc85c5a2316959fc9f76b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 dcfb445bc1309c18dac961724a1bd4415e8d2fa55c92e1c138f575bc50446d31
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fc5469c0176b05aa8e8d1df006cac79c119e231868207c7e26d488d8bc59f500
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.0.1291000498
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5a196e27b6cf4ef99cbebf342fb8b79a6e86d4565147e4a40c2f02d43b8425fb
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.1.2072064606
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.1.2072064606
                                                                                                                                                                                                                                                                                                                                                                • Size 200B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 571ff676f20747556bd3e05bfc443b9c9d40350f3aa6b140487d8ea657e41cc2
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ssdfp8528.1.2072064606
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp8528.1.2072064606
                                                                                                                                                                                                                                                                                                                                                                • Size 224B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 30499df8bcd3333cb36913a8a02e5d1617581e5edc80ab616c9531cdbcef28a0
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                data_0
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 54640978243ebfd9d738eefd9e6192cc750de043467b1d414e78e29eda996ec5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3bbd785d72ea1a1f23adfacd35291a06e050e94242c370345665f379730dbdc7
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 adc4c62ef45c57657fe2b2d00b2bc1231a52c4e932c4f63346334e67cbc74610
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 65a477598f5a45c44e24358977f4e82ec77a8dd0f9deb4189033210138549648
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3cedb218eb760af188d06fcb7a5085e267b02ea4a757dc13ea875a0730ce52cc
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8f3f52a1e274304255e805a30cc44e390cae9cb6b11f850dcca791bbb4bffb45
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d7d7ab02b5e99de7c35ddae883cdd79828dfcdb9ec81535ac62a3b5e56071578
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 640d06ee92879265a310c8fc613ae42b9ea1104148df982b1d4208f77071b52d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5f201384a9d7bad7cdb67f888ed986af72485efcf967fd4820c804904d6221ff
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                assistant_prefs.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                                                                                                                                                                                                                                                                                                                                                • Size 151B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4cd30f67fc5542406e943bfc7482bdfdcaf7ac432f55893ccd2535b3df7ffde4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 124B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 42dc5689279765d5204eae760cb625510863a8cec862a2375f042ad1b5819351
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 460B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fbe0a67c80ac1afb6bba03a76d99d6c2449e28b1a64a7a1a7926e9545a8e8c04
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 348B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 de14703558b985f5f4b1caf67b377098598d5e0d83af2e2050f572d236d3813c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 236B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0321973970d0babce030013e6472f10faea4c2a60450d770a8045f235e882c2d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 572B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 967352159c87abfc52b7de5891e47513a95898ac106e01a3c09f3baca578e60c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 796B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fa090efaa69fcbee71564ccd501b407dc4403ce5e0e4fea2d93a2ceccda7c9d4
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 684B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d3af22dc2e9a8114cc47a53a1a9100210da796400ac2312fd1990b7e6ba0d501
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                • Size 908B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 916e1f61bae89b7c334bef6261b1eb4c47d3776430083a829c31299d77a96b63
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Bookmarks
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Bookmarks
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7ded3d4e636d921762128ea527d42b34c6d00192482fb6bbe3c6f9827c093427
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                BookmarksExtras
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\BookmarksExtras
                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 257bd2d88b435c4cae0eca5e13e4ee082c19a7dab324041ee193b26d3f013b2d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 318B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e4b7d25f02fd274c6e5f3767cf0e6b703a7bdbfc643bfced9de0c2bcc5c6bb37
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache\Default\Code Cache\js\index
                                                                                                                                                                                                                                                                                                                                                                • Size 24B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                • Size 168B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8fd82b6b5fd892078b6fa38093f85efc038039a75471a32131dde0572617b62d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                the-real-index~RFe5e0d2d.TMP
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache\Default\Code Cache\js\index-dir\the-real-index~RFe5e0d2d.TMP
                                                                                                                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 33142b8f392bcb28557cf9754d58907cd6ef73095804f1f91676e03bba5aac9f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a30ecd6f259960b771dbc3913b92dea64163f543abd1d688b4f0161993a7dab9
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 bafb7645273367ff8f4f51aa9ed6e6e60a7df22c084fb49dcfe428e6aff3857d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Preferences~RFe5dc304.TMP
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache\Default\Preferences~RFe5dc304.TMP
                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8d3ec1f7e27c7cc5d17e17ac17c05f45f626d121679e5bc149f168cd88584f84
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 74a3a2d3e4926b55aa7cfe1632a0c96a7da205e99924078e1fc0ef2c086b7add
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d451dafe1df1897d16ae4f85fe5077b82ffa670456a479da498cca9ff2a6e42d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache\Local State
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 46981235791fefb8ab4c8cd5ffc97b96c893d7665415d4157fac5d62c92febfa
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Local State~RFe5d99b2.TMP
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\h8n_360ts\WebCache\SeCache\Local State~RFe5d99b2.TMP
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 70abe0040beb49415e7eb18152d43c0404bd20977713d0e0a41c5b9992eca2bb
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                Atomic Heart.lnk
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\Desktop\Atomic Heart.lnk
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c54b1e4c8b916203264623fb8730596d64fe53444037f0d1a0b80805da4d60d3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                War Thunder.lnk
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\Desktop\War Thunder.lnk
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a19de2c3ac7c724d7ed4088daa308d4b6643652a0ea9bad5e66e3b737ab0c488
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                fnfLauncher.lnk
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\Desktop\fnfLauncher.lnk
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 080bf156a9782ccd0930b0297bd7eddf42b661f54ed7bfd711aae10c9fc2ebba
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                MSI94DF.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\Installer\MSI94DF.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 181KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 a5dd2f97c6787c335b7807ff9b6966877e9dd811f9e26326837a7d2bd224de86
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                MSI959B.tmp
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\Installer\MSI959B.tmp
                                                                                                                                                                                                                                                                                                                                                                • Size 189KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 669cc0aae068ced3154acaecb0c692c4c5e61bc2ca95b40395a3399e75fcb9b2
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                decoded_xz
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_BITS_1660_1520240082\decoded_xz
                                                                                                                                                                                                                                                                                                                                                                • Size 184KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                LICENSE
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_1093906150\LICENSE
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                verified_contents.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\_metadata\verified_contents.json
                                                                                                                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 65491b21947d60c87c6358dcf69df9aca2b99e8f3b611bd3d559699bbc25000b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-af.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-af.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-be.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-be.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 25b7cfa039f82ac92990e1789de40988d490db9b613852fb24036b38ff87893c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-bg.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-bg.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 7593f0395081e3eeb2d8516d10746608afd826cffd4e7e37d53936993d200a13
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-cs.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-cs.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 62KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 97a4755fe9e653a08969f1933e3db19c712078b227bd5aa6799093abc5a0edc3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-cu.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-cu.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 51KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2baee19d5024ff87dcf3a1b9d0da1b3ac5a1e506adeead3b96a4de5395d0290e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-cy.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-cy.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 35KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4d0569fe2f4b41b3164cf610310e1d996fd2c553cc39de6062e50f4e033cc207
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-da.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-da.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 86fdfc8db62cdaa11f615dad3712da1f4708294e029a4aad0fc285d4ea16c4bd
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-de-1901.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-de-1901.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 118KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8c5fa4b29519d17593e923bc6a9a284df7a6d07fac42f897110b8fb2e0baeef5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-de-1996.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-de-1996.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 117KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d673805547a0228d2f57a5ad551b8760cfcc521f38c49284ed3976e3515bca49
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-de-ch-1901.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-de-ch-1901.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 117KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8223a912160354e05735522fdb339dc59b353ad5d1e4f4cfa94898dc348e748f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-el.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-el.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 76ae3454fb0045adb83094832578aa4749ce4dc694c4edcf85b419c1e2d9bcd3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-en-gb.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-en-gb.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 45KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ae4b78009d18e849d87458677151ee3aad1608ad72ec050dfd2421d22e7d031f
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-en-us.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-en-us.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 58KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 03727cd6f4aa71b203c4c74ca6987ac7d87f13037337ac6f4b6996c2a0dc5f8c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-es.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-es.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 137461792537a2e56a6475e81e2b9ad7a2bdabf1f4738fae186dca3022357349
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-et.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-et.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 10079c66014dd2e6abfef5a018e6553fd5a036afb96bd2a235440a188f88b15e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-eu.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-eu.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 665B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 e2778a4fc7b8f064a32b6a44bc29f10e264d9d6214b8edb8ebd1f5f6d68e2eb2
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-fr.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-fr.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 00bd8b2d398d77575da2bfbbc5ec641aad7f2a87d4a31186ec169e85a27de5b7
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-ga.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-ga.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1e3043f395bfb2a4c43d0480ba2f168ed622881cc3482359ca6e99821e983be8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-gl.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-gl.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 89d98eff14e2cf1c2314efdf392339e62d7e786f100202a7377bf7b22095a0c5
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-gu.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-gu.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 655B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 af0edb67c2219b803c3eb6c1dee6f2d41a3fe00468a9da8be8ef5056d701abf3
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-hr.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-hr.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d5f066a5657f1d7c39d053956df204b7926f40d2fe4f69573af09d909066e26c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-hu.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-hu.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 309KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8b3a16268cc932b226c17ff405b3cfb6eb38a9511a2043d653dc03729efceac1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-hy.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-hy.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 605B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 9b34dfca85cb27546829f104f137757efb274934c1e9d4991f55ad564962a76a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-it.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-it.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f9c027d7fd44b01cd5e1cdf802e20c63560673098af18bea0930ba9af334e0f7
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-ka.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-ka.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2472271c7955c67e9fdb86d0cd3c5d88f5e598da4f44b6741284b2bbcb2e4d52
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-kn.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-kn.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 711B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2b999d0a152f804601aa8f38ff0d3a6e5949977bf1daa76fa888acae21526287
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-la.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-la.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fd4b6f36135cd3b932e350ec2017dfd89d2e36ac226f54e4c8f2e4bc6db0593d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-lt.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-lt.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6fe2da26a96834fb9aecbe586d40f728df0ef676a4f235450054e66841b9e2ca
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-lv.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-lv.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 65962ccb5055e4c693e5ac493d6affdc810ec168eb2942f5705b7f4e464f9993
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-ml.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-ml.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 776B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 90572db8f49b01ec6a102732cdf14fc3f07d363cbe0d261103e583043164e888
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-mn-cyrl.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-mn-cyrl.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 0d2731f16aa2c90faec8e63260358cbccede403faf95e3af8c66bc2db0729ca0
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-mul-ethi.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-mul-ethi.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f2fac1bd069ffe5cd1112d94cc31137ed38a1b161093ecd74c9c1688428b688b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-nl.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-nl.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 75KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5ebde398944b461cf940f0520c5a49c0882b6f36f9ac5cda0538c8c8b44fb7ca
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-or.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-or.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 647B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 4e9cd302baffc4ea3e9652327ea24072ebf37b5c4fc0719292bdac10aaad665b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-pa.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-pa.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 607B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 470329d28faa484f945d78ffefb176dcb6f2032c753e25bc014106ad24b2c68a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-pt.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-pt.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f6fbf1bcb260cc86256fc494f388f7b27d10865fbf8f61517dee25af4d58d6e8
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-ru.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-ru.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 336ce2048ffd31b7bcaf435e53badfaf0579e405042d49adbc0823f6be5f9614
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-sk.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-sk.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 62KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 138c5990961da21993653f54a413ddacb8921d6d70b892b7ca154d6e8ad2028c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-sl.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-sl.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 ad746c68562603ac3b15e89da03c76e081c08e7d9c8d4c9f64763e53d696c77c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-sq.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-sq.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 bc29c9401ce952414cbaebc5c8ee1d27c1706c6f77807b5ff713e2124438b3ca
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-sv.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-sv.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 56642aa5a37625ff9d034761d16b034d4ba5be74090cbd825956bbce2775ecd1
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-ta.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-ta.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 554B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 40fda94856a86f065de8baa6184ea63dcdb011ee4ca498a7c1fee44c99314c67
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-te.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-te.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 703B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 516fa9654fa3aeaab480d40eaf6ad78fc039086bd8edc144be3d59525edcac29
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-tk.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-tk.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 77fdaed29bd842aaa976ab7ef81b617a15c0a2d1ebd1161c1bf26b79a108b5cd
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-uk.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-uk.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1c626abe40d43f6d56a01b5b40305d7c7d6481f616eac00a3f3aaaaca8388786
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-und-ethi.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\hyph-und-ethi.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 1de83cb787dfaf53fb7e6e8db3aae5008ad24ebdd28be02031306ea9e9f3e285
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                manifest.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_2062189465\manifest.json
                                                                                                                                                                                                                                                                                                                                                                • Size 82B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                LICENSE
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_24113562\LICENSE
                                                                                                                                                                                                                                                                                                                                                                • Size 473B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                verified_contents.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_24113562\_metadata\verified_contents.json
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 afc120295fd54e5dbe43fb66c87f3239a03fed4b3653617039b79172862de61b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                widevinecdm.dll
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_24113562\_platform_specific\win_x64\widevinecdm.dll
                                                                                                                                                                                                                                                                                                                                                                • Size 21.6MB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                widevinecdm.dll.sig
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_24113562\_platform_specific\win_x64\widevinecdm.dll.sig
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                manifest.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_24113562\manifest.json
                                                                                                                                                                                                                                                                                                                                                                • Size 1002B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                verified_contents.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_875602037\_metadata\verified_contents.json
                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6cc8b90820b5474238253b5c044555a7b646b1c76acd9068032e672b27dc7c76
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                manifest.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_875602037\manifest.json
                                                                                                                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                safety_tips.pb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1660_875602037\safety_tips.pb
                                                                                                                                                                                                                                                                                                                                                                • Size 180KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-bn.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping8528_1082934168\hyph-bn.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 703B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-mr.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping8528_1082934168\hyph-mr.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 687B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                hyph-nn.hyb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping8528_1082934168\hyph-nn.hyb
                                                                                                                                                                                                                                                                                                                                                                • Size 141KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                verified_contents.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping8528_1992129131\_metadata\verified_contents.json
                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 6afcede4f2b6a8781fc7a5b4267e3b5fa2caef801a189c30d85eca77f8c2f2fe
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                crs.pb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping8528_1992129131\crs.pb
                                                                                                                                                                                                                                                                                                                                                                • Size 341KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 627cfcfe9422c048429212cea2e3fd2e3e36aac2d41e5fe683eb5b8c147ff558
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                ct_config.pb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping8528_1992129131\ct_config.pb
                                                                                                                                                                                                                                                                                                                                                                • Size 52KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c1e015b82eb91719d42c9341e06c25b15ba9fdc14ce7267dea5addcef6252a9c
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                kp_pinslist.pb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping8528_1992129131\kp_pinslist.pb
                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 d6646702a411cb15175d3b141e475afb9eb985226247d5ed8a57ec09d42cd417
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                manifest.json
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping8528_1992129131\manifest.json
                                                                                                                                                                                                                                                                                                                                                                • Size 73B
                                                                                                                                                                                                                                                                                                                                                                • SHA256 fb632c5a86f09fdb904bc82ee84c2a07e0c15b9f109921271651249348016aef
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                mtc_config.pb
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping8528_1992129131\mtc_config.pb
                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 71fef094748c213d6f3cfb5e8f669de97bef16c920f5328f58b84bcd3b699d78
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                yandex_browser_service_update.log
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 c611133d4a6828ea334e49537ba41a0463f21a49c1716a75e6214bc39272149e
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                yandex_browser_service_update.log
                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                • SHA256 725f7dfbf69a186d8076e6652d0d9bb509c58c423715f5956013b9aac00bbd67
                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                memory/1192-13328-0x00000272802F0000-0x0000027280497000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/1192-13494-0x00000272802F0000-0x0000027280497000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/2248-13329-0x000001B6DFD80000-0x000001B6DFF27000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/2388-13814-0x0000021047240000-0x00000210473E7000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/2388-1785-0x0000021047240000-0x00000210473E7000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/2904-1800-0x00000242A9A50000-0x00000242A9BF7000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-1514-0x0000000000D40000-0x0000000000D4A000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-10790-0x00000000077B0000-0x00000000077B1000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-1556-0x0000000000D20000-0x0000000000D2A000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-17227-0x00000000098D0000-0x00000000098D1000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-1775-0x0000000000D20000-0x0000000000D2A000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-1540-0x0000000000D20000-0x0000000000D2A000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-1751-0x0000000000D20000-0x0000000000D2A000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-1739-0x0000000000D20000-0x0000000000D2A000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-1591-0x0000000000D20000-0x0000000000D2A000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-10702-0x0000000002C20000-0x0000000002C21000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-10791-0x00000000077C0000-0x00000000077C1000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-15461-0x0000000007F90000-0x0000000007F91000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-10789-0x0000000002D40000-0x0000000002D41000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-11382-0x00000000094B0000-0x00000000094B1000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-11381-0x0000000009480000-0x0000000009481000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-13553-0x0000000007F70000-0x0000000007F71000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-13309-0x0000000009B70000-0x0000000009B71000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-13308-0x00000000077E0000-0x00000000077E1000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-13307-0x00000000077D0000-0x00000000077D1000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3364-1536-0x0000000000D40000-0x0000000000D4A000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/3684-1531-0x000001DF56DA0000-0x000001DF56F47000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4044-1793-0x0000000000950000-0x0000000000DAD000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4044-646-0x0000000000950000-0x0000000000DAD000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4044-1533-0x0000000000950000-0x0000000000DAD000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4044-1257-0x0000000000950000-0x0000000000DAD000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4044-665-0x0000000000950000-0x0000000000DAD000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4044-656-0x0000000000950000-0x0000000000DAD000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4044-1797-0x0000000000950000-0x0000000000DAD000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4044-642-0x0000000000950000-0x0000000000DAD000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4044-641-0x0000000000D14000-0x0000000000D16000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4188-1799-0x0000014AC21D0000-0x0000014AC2377000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4188-13650-0x0000014AC21D0000-0x0000014AC2377000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4208-17422-0x0000020654290000-0x00000206544A9000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4552-644-0x0000000000380000-0x0000000000483000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4552-1798-0x0000000000380000-0x0000000000483000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4552-626-0x000000000043F000-0x0000000000440000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4552-627-0x0000000000380000-0x0000000000483000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4664-13654-0x0000000000400000-0x0000000000774000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4664-2129-0x0000000000400000-0x0000000000774000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4664-2838-0x0000000000400000-0x0000000000774000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/4664-13301-0x0000000000400000-0x0000000000774000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/5060-1786-0x000002540BC80000-0x000002540BE27000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/5336-2952-0x0000000010620000-0x0000000010734000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/5364-17653-0x00000167EDF20000-0x00000167EE0C7000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/5520-15111-0x0000021106990000-0x0000021106B37000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/5620-15295-0x00007FFC6CCF0000-0x00007FFC6CCF1000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/5620-15296-0x00007FFC6D190000-0x00007FFC6D191000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/5936-13808-0x0000000000400000-0x0000000000774000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/5936-13992-0x0000000000400000-0x0000000000774000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/5936-1956-0x0000000000400000-0x0000000000774000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/6000-15293-0x00007FFC6BC90000-0x00007FFC6BC91000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/6384-17286-0x00000200BBA00000-0x00000200BBA6B000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/6492-14642-0x000001FAC57B0000-0x000001FAC5957000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/6508-17709-0x0000028C71060000-0x0000028C71207000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/7840-17710-0x0000023644BC0000-0x0000023644D67000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/8360-17708-0x0000019E1B400000-0x0000019E1B5A7000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/8608-17697-0x00000275AFEF0000-0x00000275B0097000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/8668-17683-0x000002E065E70000-0x000002E066017000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/9172-13515-0x00007FFC6CCF0000-0x00007FFC6CCF1000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/9172-13514-0x00007FFC6D190000-0x00007FFC6D191000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/9496-17054-0x000001E8267D0000-0x000001E8269E9000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                memory/10048-16331-0x000001E6C15E0000-0x000001E6C1787000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                Download