6514b345465786d232a61f8aca8e3b60e2bf8a3e45f237086e55caac0c19cb4d

max time kernel
94s
max time network
270s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20250113-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20250113-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
27-01-2025 16:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_1d93e8597dd860cf81cd913c4b997818.html
Size

25KB
MD5

1d93e8597dd860cf81cd913c4b997818
SHA1

a7dacf6a32b194720a87130a16f2222c44f036eb
SHA256

6514b345465786d232a61f8aca8e3b60e2bf8a3e45f237086e55caac0c19cb4d
SHA512

c35592acafe20b18914ba7ee31201faa7534136df292d7c14436fb3bcbdd5f07b96b3b63897509068b8263ec4e12f55e192de027996dac8e63e08712fb891e98
SSDEEP

384:PqlIcCtF4JVGTHyk9v1o99t5W9ISFaTGHx6QckT/gbpLOXguLZ:sZtSF5zg9ExLZ

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
166	324	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 989992.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
4024	msedge.exe
4024	msedge.exe
324	msedge.exe
324	msedge.exe
2580	msedge.exe
2580	msedge.exe
1992	identity_helper.exe
1992	identity_helper.exe
3064	msedge.exe
3064	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe

Suspicious use of FindShellTrayWindow 61 IoCs

pid	Process
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4024 wrote to memory of 4456	4024	msedge.exe	82
PID 4024 wrote to memory of 4456	4024	msedge.exe	82
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 4620	4024	msedge.exe	83
PID 4024 wrote to memory of 2536	4024	msedge.exe	84
PID 4024 wrote to memory of 2536	4024	msedge.exe	84
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85
PID 4024 wrote to memory of 1188	4024	msedge.exe	85

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1d93e8597dd860cf81cd913c4b997818.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffae7f746f8,0x7ffae7f74708,0x7ffae7f74718
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,3112395505657816159,14128359901681478042,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2204,3112395505657816159,14128359901681478042,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2204,3112395505657816159,14128359901681478042,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,3112395505657816159,14128359901681478042,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,3112395505657816159,14128359901681478042,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,3112395505657816159,14128359901681478042,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:3736

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2964

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:880

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\ConvertRestore.html
1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x144,0x148,0x14c,0x120,0x150,0x7ffae7f746f8,0x7ffae7f74708,0x7ffae7f74718
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - Suspicious behavior: EnumeratesProcesses
  PID:324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3060 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2520 /prefetch:1
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2928 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3740 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5992 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6448 /prefetch:1
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6520 /prefetch:8
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7096 /prefetch:8
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7288 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3064
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:3756
- - C:\Users\Admin\AppData\Local\Temp\7zSCAEB4A19\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zSCAEB4A19\setup.exe --server-tracking-blob=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
    3⤵
    PID:5952
  - - C:\Users\Admin\AppData\Local\Temp\7zSCAEB4A19\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zSCAEB4A19\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x308,0x334,0x742b2f6c,0x742b2f78,0x742b2f84
      4⤵
      PID:5712
  - - C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:5836
  - - C:\Users\Admin\AppData\Local\Temp\7zSCAEB4A19\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zSCAEB4A19\setup.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --vought_browser=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=5952 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_20250127161823" --session-guid=4cece8da-79c5-4a29-8722-21c4937d5e10 --server-tracking-blob=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 --desktopshortcut=1 --wait-for-package --initial-proc-handle=8407000000000000
      4⤵
      PID:7852
    - - C:\Users\Admin\AppData\Local\Temp\7zSCAEB4A19\setup.exe
        
        C:\Users\Admin\AppData\Local\Temp\7zSCAEB4A19\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x334,0x338,0x33c,0x304,0x340,0x73262f6c,0x73262f78,0x73262f84
        5⤵
        
        PID:8176
  - - C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202501271618231\assistant\Opera_GX_assistant_73.0.3856.382_Setup.exe_sfx.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202501271618231\assistant\Opera_GX_assistant_73.0.3856.382_Setup.exe_sfx.exe"
      4⤵
      PID:6636
  - - C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202501271618231\assistant\assistant_installer.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202501271618231\assistant\assistant_installer.exe" --version
      4⤵
      PID:1492
    - - C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202501271618231\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202501271618231\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=73.0.3856.382 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x4e4f48,0x4e4f58,0x4e4f64
        5⤵
        
        PID:7872
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:5784
- - C:\Users\Admin\AppData\Local\Temp\7zS896A4349\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS896A4349\setup.exe --server-tracking-blob=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
    3⤵
    PID:5964
  - - C:\Users\Admin\AppData\Local\Temp\7zS896A4349\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS896A4349\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x73262f6c,0x73262f78,0x73262f84
      4⤵
      PID:3612
  - - C:\Users\Admin\AppData\Local\Temp\7zS896A4349\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS896A4349\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:4928
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:6060
- - C:\Users\Admin\AppData\Local\Temp\7zSCA7CE429\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zSCA7CE429\setup.exe --server-tracking-blob=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
    3⤵
    PID:5488
  - - C:\Users\Admin\AppData\Local\Temp\7zSCA7CE429\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zSCA7CE429\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x716f2f6c,0x716f2f78,0x716f2f84
      4⤵
      PID:4940
  - - C:\Users\Admin\AppData\Local\Temp\7zSCA7CE429\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zSCA7CE429\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:6492
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:3860
- - C:\Users\Admin\AppData\Local\Temp\7zS41FC8F69\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS41FC8F69\setup.exe --server-tracking-blob=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
    3⤵
    PID:5492
  - - C:\Users\Admin\AppData\Local\Temp\7zS41FC8F69\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS41FC8F69\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x70e82f6c,0x70e82f78,0x70e82f84
      4⤵
      PID:1160
  - - C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:6368
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:864
- - C:\Users\Admin\AppData\Local\Temp\7zS063C2B39\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS063C2B39\setup.exe --server-tracking-blob=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
    3⤵
    PID:5836
  - - C:\Users\Admin\AppData\Local\Temp\7zS063C2B39\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS063C2B39\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x308,0x334,0x6e312f6c,0x6e312f78,0x6e312f84
      4⤵
      PID:692
  - - C:\Users\Admin\AppData\Local\Temp\7zS063C2B39\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS063C2B39\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7412
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:1984
- - C:\Users\Admin\AppData\Local\Temp\7zS0C7C7A79\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS0C7C7A79\setup.exe --server-tracking-blob=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
    3⤵
    PID:2688
  - - C:\Users\Admin\AppData\Local\Temp\7zS0C7C7A79\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS0C7C7A79\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x338,0x33c,0x340,0x310,0x344,0x73262f6c,0x73262f78,0x73262f84
      4⤵
      PID:6524
  - - C:\Users\Admin\AppData\Local\Temp\7zS0C7C7A79\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS0C7C7A79\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:3524
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:2972
- - C:\Users\Admin\AppData\Local\Temp\7zSC9B05769\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zSC9B05769\setup.exe --server-tracking-blob=ZmRhMGNhZWVkODUwMGViOWIwN2U0NWU2YzQzNmRmY2EwYmFjMmEwOTc0MmMyYmRmNDA5N2I1MGQwMzhhMjU5MTp7ImNvdW50cnkiOiJHQiIsImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYUdYU2V0dXAuZXhlIiwicHJvZHVjdCI6Im9wZXJhX2d4IiwicXVlcnkiOiIvb3BlcmFfZ3gvc3RhYmxlL3dpbmRvd3M/dXRtX3NvdXJjZT1iaW5nJnV0bV9tZWRpdW09b3NlJnV0bV9jYW1wYWlnbj0lMjhub25lJTI5Jmh0dHBfcmVmZXJyZXI9aHR0cHMlM0ElMkYlMkZ3d3cuYmluZy5jb20lMkYmdXRtX3NpdGU9b3BlcmFfY29tJnV0bV9sYXN0cGFnZT1vcGVyYS5jb20lMkYmZGxfdG9rZW49ODIxNzE2ODEiLCJ0aW1lc3RhbXAiOiIxNzM3OTk0NjcxLjUxMTYiLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvOTIuMC40NTE1LjEzMSBTYWZhcmkvNTM3LjM2IEVkZy85Mi4wLjkwMi42NyIsInV0bSI6eyJjYW1wYWlnbiI6Iihub25lKSIsImxhc3RwYWdlIjoib3BlcmEuY29tLyIsIm1lZGl1bSI6Im9zZSIsInNpdGUiOiJvcGVyYV9jb20iLCJzb3VyY2UiOiJiaW5nIn0sInV1aWQiOiJhZWMyZjUyOS0xOTNlLTQyY2MtODE1YS00NmM3ZjVkYzBmMjMifQ==
    3⤵
    PID:4396
  - - C:\Users\Admin\AppData\Local\Temp\7zSC9B05769\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zSC9B05769\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x330,0x334,0x338,0x30c,0x33c,0x6ea02f6c,0x6ea02f78,0x6ea02f84
      4⤵
      PID:1040
  - - C:\Users\Admin\AppData\Local\Temp\7zSC9B05769\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zSC9B05769\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7884
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:5676
- - C:\Users\Admin\AppData\Local\Temp\7zSC2623E69\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zSC2623E69\setup.exe --server-tracking-blob=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
    3⤵
    PID:5908
  - - C:\Users\Admin\AppData\Local\Temp\7zSC2623E69\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zSC2623E69\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x6f0f2f6c,0x6f0f2f78,0x6f0f2f84
      4⤵
      PID:6540
  - - C:\Users\Admin\AppData\Local\Temp\7zSC2623E69\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zSC2623E69\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:444
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:2512
- - C:\Users\Admin\AppData\Local\Temp\7zS0D956E79\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS0D956E79\setup.exe --server-tracking-blob=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
    3⤵
    PID:4424
  - - C:\Users\Admin\AppData\Local\Temp\7zS0D956E79\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS0D956E79\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x6f7e2f6c,0x6f7e2f78,0x6f7e2f84
      4⤵
      PID:6324
  - - C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:1248
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:4644
- - C:\Users\Admin\AppData\Local\Temp\7zS422FED19\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS422FED19\setup.exe --server-tracking-blob=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
    3⤵
    PID:5392
  - - C:\Users\Admin\AppData\Local\Temp\7zS422FED19\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS422FED19\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x68fd2f6c,0x68fd2f78,0x68fd2f84
      4⤵
      PID:5968
  - - C:\Users\Admin\AppData\Local\Temp\7zS422FED19\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS422FED19\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7664
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:784
- - C:\Users\Admin\AppData\Local\Temp\7zS01357979\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS01357979\setup.exe --server-tracking-blob=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
    3⤵
    PID:5800
  - - C:\Users\Admin\AppData\Local\Temp\7zS01357979\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS01357979\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x6ce42f6c,0x6ce42f78,0x6ce42f84
      4⤵
      PID:7140
  - - C:\Users\Admin\AppData\Local\Temp\7zS01357979\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS01357979\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7992
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:5468
- - C:\Users\Admin\AppData\Local\Temp\7zSC55E7169\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zSC55E7169\setup.exe --server-tracking-blob=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
    3⤵
    PID:5668
  - - C:\Users\Admin\AppData\Local\Temp\7zSC55E7169\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zSC55E7169\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x6d532f6c,0x6d532f78,0x6d532f84
      4⤵
      PID:7148
  - - C:\Users\Admin\AppData\Local\Temp\7zSC55E7169\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zSC55E7169\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7228
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:4516
- - C:\Users\Admin\AppData\Local\Temp\7zS4A1F3A19\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS4A1F3A19\setup.exe --server-tracking-blob=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
    3⤵
    PID:4868
  - - C:\Users\Admin\AppData\Local\Temp\7zS4A1F3A19\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS4A1F3A19\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x2e8,0x334,0x6dc22f6c,0x6dc22f78,0x6dc22f84
      4⤵
      PID:6532
  - - C:\Users\Admin\AppData\Local\Temp\7zS4A1F3A19\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS4A1F3A19\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:6340
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:5476
- - C:\Users\Admin\AppData\Local\Temp\7zS46586509\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS46586509\setup.exe --server-tracking-blob=ZmRhMGNhZWVkODUwMGViOWIwN2U0NWU2YzQzNmRmY2EwYmFjMmEwOTc0MmMyYmRmNDA5N2I1MGQwMzhhMjU5MTp7ImNvdW50cnkiOiJHQiIsImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYUdYU2V0dXAuZXhlIiwicHJvZHVjdCI6Im9wZXJhX2d4IiwicXVlcnkiOiIvb3BlcmFfZ3gvc3RhYmxlL3dpbmRvd3M/dXRtX3NvdXJjZT1iaW5nJnV0bV9tZWRpdW09b3NlJnV0bV9jYW1wYWlnbj0lMjhub25lJTI5Jmh0dHBfcmVmZXJyZXI9aHR0cHMlM0ElMkYlMkZ3d3cuYmluZy5jb20lMkYmdXRtX3NpdGU9b3BlcmFfY29tJnV0bV9sYXN0cGFnZT1vcGVyYS5jb20lMkYmZGxfdG9rZW49ODIxNzE2ODEiLCJ0aW1lc3RhbXAiOiIxNzM3OTk0NjcxLjUxMTYiLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvOTIuMC40NTE1LjEzMSBTYWZhcmkvNTM3LjM2IEVkZy85Mi4wLjkwMi42NyIsInV0bSI6eyJjYW1wYWlnbiI6Iihub25lKSIsImxhc3RwYWdlIjoib3BlcmEuY29tLyIsIm1lZGl1bSI6Im9zZSIsInNpdGUiOiJvcGVyYV9jb20iLCJzb3VyY2UiOiJiaW5nIn0sInV1aWQiOiJhZWMyZjUyOS0xOTNlLTQyY2MtODE1YS00NmM3ZjVkYzBmMjMifQ==
    3⤵
    PID:5212
  - - C:\Users\Admin\AppData\Local\Temp\7zS46586509\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS46586509\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x6c062f6c,0x6c062f78,0x6c062f84
      4⤵
      PID:7132
  - - C:\Users\Admin\AppData\Local\Temp\7zS46586509\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS46586509\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7340
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:3100
- - C:\Users\Admin\AppData\Local\Temp\7zSC1CD6A19\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zSC1CD6A19\setup.exe --server-tracking-blob=ZmRhMGNhZWVkODUwMGViOWIwN2U0NWU2YzQzNmRmY2EwYmFjMmEwOTc0MmMyYmRmNDA5N2I1MGQwMzhhMjU5MTp7ImNvdW50cnkiOiJHQiIsImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYUdYU2V0dXAuZXhlIiwicHJvZHVjdCI6Im9wZXJhX2d4IiwicXVlcnkiOiIvb3BlcmFfZ3gvc3RhYmxlL3dpbmRvd3M/dXRtX3NvdXJjZT1iaW5nJnV0bV9tZWRpdW09b3NlJnV0bV9jYW1wYWlnbj0lMjhub25lJTI5Jmh0dHBfcmVmZXJyZXI9aHR0cHMlM0ElMkYlMkZ3d3cuYmluZy5jb20lMkYmdXRtX3NpdGU9b3BlcmFfY29tJnV0bV9sYXN0cGFnZT1vcGVyYS5jb20lMkYmZGxfdG9rZW49ODIxNzE2ODEiLCJ0aW1lc3RhbXAiOiIxNzM3OTk0NjcxLjUxMTYiLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvOTIuMC40NTE1LjEzMSBTYWZhcmkvNTM3LjM2IEVkZy85Mi4wLjkwMi42NyIsInV0bSI6eyJjYW1wYWlnbiI6Iihub25lKSIsImxhc3RwYWdlIjoib3BlcmEuY29tLyIsIm1lZGl1bSI6Im9zZSIsInNpdGUiOiJvcGVyYV9jb20iLCJzb3VyY2UiOiJiaW5nIn0sInV1aWQiOiJhZWMyZjUyOS0xOTNlLTQyY2MtODE1YS00NmM3ZjVkYzBmMjMifQ==
    3⤵
    PID:2208
  - - C:\Users\Admin\AppData\Local\Temp\7zSC1CD6A19\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zSC1CD6A19\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x6c752f6c,0x6c752f78,0x6c752f84
      4⤵
      PID:7024
  - - C:\Users\Admin\AppData\Local\Temp\7zSC1CD6A19\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zSC1CD6A19\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7936
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:5496
- - C:\Users\Admin\AppData\Local\Temp\7zS875D2369\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS875D2369\setup.exe --server-tracking-blob=ZmRhMGNhZWVkODUwMGViOWIwN2U0NWU2YzQzNmRmY2EwYmFjMmEwOTc0MmMyYmRmNDA5N2I1MGQwMzhhMjU5MTp7ImNvdW50cnkiOiJHQiIsImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYUdYU2V0dXAuZXhlIiwicHJvZHVjdCI6Im9wZXJhX2d4IiwicXVlcnkiOiIvb3BlcmFfZ3gvc3RhYmxlL3dpbmRvd3M/dXRtX3NvdXJjZT1iaW5nJnV0bV9tZWRpdW09b3NlJnV0bV9jYW1wYWlnbj0lMjhub25lJTI5Jmh0dHBfcmVmZXJyZXI9aHR0cHMlM0ElMkYlMkZ3d3cuYmluZy5jb20lMkYmdXRtX3NpdGU9b3BlcmFfY29tJnV0bV9sYXN0cGFnZT1vcGVyYS5jb20lMkYmZGxfdG9rZW49ODIxNzE2ODEiLCJ0aW1lc3RhbXAiOiIxNzM3OTk0NjcxLjUxMTYiLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvOTIuMC40NTE1LjEzMSBTYWZhcmkvNTM3LjM2IEVkZy85Mi4wLjkwMi42NyIsInV0bSI6eyJjYW1wYWlnbiI6Iihub25lKSIsImxhc3RwYWdlIjoib3BlcmEuY29tLyIsIm1lZGl1bSI6Im9zZSIsInNpdGUiOiJvcGVyYV9jb20iLCJzb3VyY2UiOiJiaW5nIn0sInV1aWQiOiJhZWMyZjUyOS0xOTNlLTQyY2MtODE1YS00NmM3ZjVkYzBmMjMifQ==
    3⤵
    PID:3576
  - - C:\Users\Admin\AppData\Local\Temp\7zS875D2369\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS875D2369\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x67a72f6c,0x67a72f78,0x67a72f84
      4⤵
      PID:6700
  - - C:\Users\Admin\AppData\Local\Temp\7zS875D2369\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS875D2369\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7228
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:2480
- - C:\Users\Admin\AppData\Local\Temp\7zS0B9A0879\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS0B9A0879\setup.exe --server-tracking-blob=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
    3⤵
    PID:5528
  - - C:\Users\Admin\AppData\Local\Temp\7zS0B9A0879\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS0B9A0879\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x6b972f6c,0x6b972f78,0x6b972f84
      4⤵
      PID:640
  - - C:\Users\Admin\AppData\Local\Temp\7zS0B9A0879\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS0B9A0879\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7720
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:2476
- - C:\Users\Admin\AppData\Local\Temp\7zSCA97C649\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zSCA97C649\setup.exe --server-tracking-blob=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
    3⤵
    PID:6028
  - - C:\Users\Admin\AppData\Local\Temp\7zSCA97C649\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zSCA97C649\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x65e52f6c,0x65e52f78,0x65e52f84
      4⤵
      PID:4348
  - - C:\Users\Admin\AppData\Local\Temp\7zSCA97C649\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zSCA97C649\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7504
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:4828
- - C:\Users\Admin\AppData\Local\Temp\7zSCD24FB49\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zSCD24FB49\setup.exe --server-tracking-blob=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
    3⤵
    PID:1264
  - - C:\Users\Admin\AppData\Local\Temp\7zSCD24FB49\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zSCD24FB49\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x32c,0x330,0x334,0x308,0x338,0x67322f6c,0x67322f78,0x67322f84
      4⤵
      PID:5324
  - - C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:6708
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:1380
- - C:\Users\Admin\AppData\Local\Temp\7zS46598679\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS46598679\setup.exe --server-tracking-blob=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
    3⤵
    PID:4824
  - - C:\Users\Admin\AppData\Local\Temp\7zS46598679\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS46598679\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x2d8,0x334,0x688e2f6c,0x688e2f78,0x688e2f84
      4⤵
      PID:6000
  - - C:\Users\Admin\AppData\Local\Temp\7zS46598679\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS46598679\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7420
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:3040
- - C:\Users\Admin\AppData\Local\Temp\7zS0EB9AE49\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS0EB9AE49\setup.exe --server-tracking-blob=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
    3⤵
    PID:5876
  - - C:\Users\Admin\AppData\Local\Temp\7zS0EB9AE49\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS0EB9AE49\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x656d2f6c,0x656d2f78,0x656d2f84
      4⤵
      PID:7496
  - - C:\Users\Admin\AppData\Local\Temp\7zS0EB9AE49\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS0EB9AE49\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:8000
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:2944
- - C:\Users\Admin\AppData\Local\Temp\7zS08BCDA69\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS08BCDA69\setup.exe --server-tracking-blob=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
    3⤵
    PID:3268
  - - C:\Users\Admin\AppData\Local\Temp\7zS08BCDA69\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS08BCDA69\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x32c,0x330,0x334,0x308,0x338,0x61092f6c,0x61092f78,0x61092f84
      4⤵
      PID:3272
  - - C:\Users\Admin\AppData\Local\Temp\7zS08BCDA69\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS08BCDA69\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:5860
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:4888
- - C:\Users\Admin\AppData\Local\Temp\7zS813D2479\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS813D2479\setup.exe --server-tracking-blob=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
    3⤵
    PID:2816
  - - C:\Users\Admin\AppData\Local\Temp\7zS813D2479\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS813D2479\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x6b282f6c,0x6b282f78,0x6b282f84
      4⤵
      PID:7032
  - - C:\Users\Admin\AppData\Local\Temp\7zS813D2479\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS813D2479\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7200
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:1808
- - C:\Users\Admin\AppData\Local\Temp\7zS01737B29\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS01737B29\setup.exe --server-tracking-blob=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
    3⤵
    PID:3920
  - - C:\Users\Admin\AppData\Local\Temp\7zS01737B29\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS01737B29\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x696c2f6c,0x696c2f78,0x696c2f84
      4⤵
      PID:952
  - - C:\Users\Admin\AppData\Local\Temp\7zS01737B29\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS01737B29\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7348
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:552
- - C:\Users\Admin\AppData\Local\Temp\7zS82292339\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS82292339\setup.exe --server-tracking-blob=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
    3⤵
    PID:6392
  - - C:\Users\Admin\AppData\Local\Temp\7zS82292339\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS82292339\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x66542f6c,0x66542f78,0x66542f84
      4⤵
      PID:4548
  - - C:\Users\Admin\AppData\Local\Temp\7zS82292339\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS82292339\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7192
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:1456
- - C:\Users\Admin\AppData\Local\Temp\7zS0B53D649\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS0B53D649\setup.exe --server-tracking-blob=ZmRhMGNhZWVkODUwMGViOWIwN2U0NWU2YzQzNmRmY2EwYmFjMmEwOTc0MmMyYmRmNDA5N2I1MGQwMzhhMjU5MTp7ImNvdW50cnkiOiJHQiIsImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYUdYU2V0dXAuZXhlIiwicHJvZHVjdCI6Im9wZXJhX2d4IiwicXVlcnkiOiIvb3BlcmFfZ3gvc3RhYmxlL3dpbmRvd3M/dXRtX3NvdXJjZT1iaW5nJnV0bV9tZWRpdW09b3NlJnV0bV9jYW1wYWlnbj0lMjhub25lJTI5Jmh0dHBfcmVmZXJyZXI9aHR0cHMlM0ElMkYlMkZ3d3cuYmluZy5jb20lMkYmdXRtX3NpdGU9b3BlcmFfY29tJnV0bV9sYXN0cGFnZT1vcGVyYS5jb20lMkYmZGxfdG9rZW49ODIxNzE2ODEiLCJ0aW1lc3RhbXAiOiIxNzM3OTk0NjcxLjUxMTYiLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvOTIuMC40NTE1LjEzMSBTYWZhcmkvNTM3LjM2IEVkZy85Mi4wLjkwMi42NyIsInV0bSI6eyJjYW1wYWlnbiI6Iihub25lKSIsImxhc3RwYWdlIjoib3BlcmEuY29tLyIsIm1lZGl1bSI6Im9zZSIsInNpdGUiOiJvcGVyYV9jb20iLCJzb3VyY2UiOiJiaW5nIn0sInV1aWQiOiJhZWMyZjUyOS0xOTNlLTQyY2MtODE1YS00NmM3ZjVkYzBmMjMifQ==
    3⤵
    PID:6500
  - - C:\Users\Admin\AppData\Local\Temp\7zS0B53D649\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS0B53D649\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x64fe2f6c,0x64fe2f78,0x64fe2f84
      4⤵
      PID:6760
  - - C:\Users\Admin\AppData\Local\Temp\7zS0B53D649\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS0B53D649\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:3088
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:3048
- - C:\Users\Admin\AppData\Local\Temp\7zS8EBC1B49\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS8EBC1B49\setup.exe --server-tracking-blob=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
    3⤵
    PID:6904
  - - C:\Users\Admin\AppData\Local\Temp\7zS8EBC1B49\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS8EBC1B49\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x609a2f6c,0x609a2f78,0x609a2f84
      4⤵
      PID:1056
  - - C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7236
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:6088
- - C:\Users\Admin\AppData\Local\Temp\7zS8C7C34F9\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS8C7C34F9\setup.exe --server-tracking-blob=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
    3⤵
    PID:7240
  - - C:\Users\Admin\AppData\Local\Temp\7zS8C7C34F9\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS8C7C34F9\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x308,0x30c,0x330,0x304,0x334,0x5e002f6c,0x5e002f78,0x5e002f84
      4⤵
      PID:7600
  - - C:\Users\Admin\AppData\Local\Temp\7zS8C7C34F9\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS8C7C34F9\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7824
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:5780
- - C:\Users\Admin\AppData\Local\Temp\7zS496F89E9\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zS496F89E9\setup.exe --server-tracking-blob=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
    3⤵
    PID:7856
  - - C:\Users\Admin\AppData\Local\Temp\7zS496F89E9\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS496F89E9\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x32c,0x330,0x334,0x308,0x2dc,0x68fd2f6c,0x68fd2f78,0x68fd2f84
      4⤵
      PID:6296
  - - C:\Users\Admin\AppData\Local\Temp\7zS496F89E9\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS496F89E9\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:8116
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:2332
- - C:\Users\Admin\AppData\Local\Temp\7zSC19DE389\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zSC19DE389\setup.exe --server-tracking-blob=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
    3⤵
    PID:7000
  - - C:\Users\Admin\AppData\Local\Temp\7zSC19DE389\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zSC19DE389\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x33c,0x340,0x344,0x318,0x348,0x716f2f6c,0x716f2f78,0x716f2f84
      4⤵
      PID:6188
  - - C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:664
- C:\Users\Admin\Downloads\OperaGXSetup.exe
  "C:\Users\Admin\Downloads\OperaGXSetup.exe"
  2⤵
  PID:6956
- - C:\Users\Admin\AppData\Local\Temp\7zSC2BF00D9\setup.exe
    C:\Users\Admin\AppData\Local\Temp\7zSC2BF00D9\setup.exe --server-tracking-blob=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
    3⤵
    PID:7564
  - - C:\Users\Admin\AppData\Local\Temp\7zSC2BF00D9\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zSC2BF00D9\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=116.0.5366.54 --initial-client-data=0x328,0x32c,0x330,0x304,0x334,0x73262f6c,0x73262f78,0x73262f84
      4⤵
      PID:7884
  - - C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\setup.exe" --version
      4⤵
      PID:7996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2172,15479227000875013861,9912197809766732843,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6900 /prefetch:2
  2⤵
  PID:7944

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2768

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4676

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A

Filesize
412B

MD5
6dcfa6880e27bf952ccedcf89297d4d1

SHA1
d44acdf3e901961b11ffb8911d65825f94834e18

SHA256
394e4c01a8fcdcb18609ba05d00a9a0ee486129776f6f2e8ee46427d43dfa6cc

SHA512
cff7013f7875460d9c00cd261b16a88903e6985b7eb581a5475f02d36e8585298b167ef33656692aa5cb031e07f15961c54eb1436fa3c2208e90dcd6f0b47840

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
3d2444bd36844308c00907bcdda3066e

SHA1
d602d08f1b06a3f3888cc16234d09d97686efc81

SHA256
ec10841bc777167cc1055ddf2b51aab172a4bf6c8b786bf1b1ccecf721194a3e

SHA512
7ea25ff95cb9da32de0f76bbbeb1f154e077cecbc2eeb2dfdf6f2464acc61877ba0bef6e279e66dc985f92da0c94d7f8c887cc244e79927e5a2108d5248187b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d40c7290836fddb7323ac9263a19d7e7

SHA1
efad822fed414b1e524218a94ca17a785363406a

SHA256
8111a49a6ceeb8e0bf83f835e8ce8b0e6ccfbaa4528ac8635640b5d2aca3f93b

SHA512
27d627e6163ad4ad57b45a8ba0bf34e500599eb06777937c2ac868ccd109affd8cff0a179af322be3126a95e4ef69eeaf34e2dc5fe7d626572be8ddb13e3c95a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d4bc32eb841f2b788106b7b5a44c13f4

SHA1
27868013e809484e5ac5cb21ee306b919ee0916e

SHA256
051cdf1896c2091e9ff822c2118fda400e2de25ee323e856bf9eb0c64c7a7257

SHA512
7a4963ea09832503179642ee750b1c8024373c66b4fce2bd316b782d1fc670c1c77cdb31f9316b34c78b6f3f1c99d90fb50e0500b72f4a647adf7653c44d242b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c8eb7d84aaea5c0c37cdce43d1ad96dd

SHA1
0a27d004b734e4c486372c6888111b813e806811

SHA256
27ec491fe2b7f0eb567a44deb50c74408376ff3addf6c88a2b1060adc4a5976e

SHA512
f39070a20583f7ff33b7b3c0e97c08da2a3ff36049e256bbe0d0031bf15579c6d9c3da8d1f9daac1073519b648a1d005a8fa195ee2232b2962516e9aa14dac3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\32a25bad-e912-44bd-b243-1b0b77ec7936.tmp

Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
412ed9b80893bf4cd3d10ac3e6caf8d5

SHA1
e83c6c3f065008a97b8f2cfa09774170ab76afcd

SHA256
9373d7f36290458d81200a1a79c4a9a01b73cc83fa5cc5f59a828d89d652a4ce

SHA512
36c6477060c0b82409c57d0fe8c6a4f4d8526deac2a9326ee5769115f88bf9d0b7f8d5258b2a2b24fe3797034f2f1bc9964e5d23c3b6f0f353c1f6b3f25bb4c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
ac5b4253d69f519dd8776d8eb5347343

SHA1
1bdc672f0d8177630c4bf1e6c2628973f26606ab

SHA256
955c8d23257f5aefa6e5a12d7dd709f115f1d317e89d8a74c18db4d367507eff

SHA512
aa46cd37f36b80e10cf408385dfb84dd1218555fd35d855c92fbac6d4d6c1571f0347acbff9fd2d4605f7038fd2f0a3936bdaa48b2d9d7513a2a950c6774f308

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe57a817.TMP

Filesize
48B

MD5
d5fce85d3d8982dedb10aa125aac1133

SHA1
e2fd9b6bcc89a4eeb153afa94a2d6b7b51935ae9

SHA256
8605aab666838715f56ec0d2c1144efbc368573edf5227f8116f8cc9aa78f69d

SHA512
daa57ee7f646d9b9b9b5ac92f519df56965f8ef321367a6f67b8bd490313d92198e93e435d2a18de7b5a5589247241ad49e0b244f672b7658990c9153d65192f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

Filesize
48B

MD5
a79eca42e914f8c5b17b4b7751be8c3c

SHA1
a466202f97d90319c5bac751b1e6aa6f4b926a63

SHA256
ea88aa0ffedb30b52f85e9790d5c56a36084f82de994720f4672cf24059b349e

SHA512
57b7e1bb0244827cea49c8e14f37c5dfd06833989d43fe603a2314fbc6f3104d3056cc2890ec7b5bfa8816952eb7bf97e3a823f9ae62941d2b75623744ef92b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Filesize
281B

MD5
f33de43e9a4f8f2cb9410b63de2279eb

SHA1
4e4efe4d361be001ac9ad5c31a95e258ce52f413

SHA256
2ba999f29ea5905bb7b395c9568e44cf84805dbe0ccb24cf1ec562a8057575cc

SHA512
133679b5364dff9fe8c60173e0c0541f13de3aaf34c9b989168f17952818be8431a9d436a6161dcd746564fda4905662dbcb61ee9dff203aecd43c9a1747bc00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\index

Filesize
256KB

MD5
7e93af86850722043b8fb19a3aac5561

SHA1
42c0e0fc419563e61b2e1538698d26d080f0acd7

SHA256
ff38e6b5080037d7577cf1ca3110f2a2868a66cb4d5a4c09681fe9e4d26b196a

SHA512
6f3374ae82ada005c2fa8f729ddbde3bcc18b6aa2779bc1378c6d1a5777a7c35028abe1a9bf1f1d7971eefc16b0d55d009440302fc1069c50fd2e30fd85ec8fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History

Filesize
124KB

MD5
559797e406992c6f597ade9d798ff9e4

SHA1
07a5aaedb1f63ad2c44f84a76dec743921a1f1fc

SHA256
93e410e1a5972d9df33ea48a06c2eb51ecfa56acbd685b11e717af2aae68a219

SHA512
9cfeaf81539f22e59acbd29c8c513dd48ba3c54a219b18724e6e6e5397cdff7230523af70b880711daa706886bfbb47cef3432ee12387b205cccb72bfd9f0bfd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History Provider Cache

Filesize
1KB

MD5
8c7a53de26bceef33fdf058170664f4c

SHA1
19a78208fac8c366b4de8bd180081c6447939682

SHA256
01bd4f99cf4f08f625dd032468de587f03c7e10cd94c5f8ce94f039a4a9e76d8

SHA512
a8ddda8faf1b657d42a4934787d48281054c71bd8fc86b373ffef05382d85222eda2b5748265d46b7ae0373a0571a7f88a683cc1b6ad2ec6e2a3a9327b29ec89

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

Filesize
28KB

MD5
cd50e039282e2a3f852ded79b6607cd5

SHA1
8c0a4178ae26b23d3b85e5890e80aea9f571a5f9

SHA256
e5470bd7d64bf9d115e4849fab6530c2cf59fc35220f20508147bfcbf9aafc83

SHA512
e64132b91bd15245d6e4d63897e58142eb2067419b676abf68bf8d6a2a991df712092707e139d45b49882fb4b7db1f034e5aab1dc2adc4f0f4589ae32dcb1d60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Filesize
291B

MD5
6690278a22d8d0d76fec5b0a4a95fbd0

SHA1
9a00f1afdd2dcac396884057fc987ccac26279e8

SHA256
28a5f3d26469a1ff16e519f26ae43efab2879e3464fe3db8e491c35e90a6ffc4

SHA512
ebe1a9817f5c145afeb7814eb5a35e0a69ee32ce62e65ca2b65b4ffd84a8e1c8f5981d7e1cfb0e34a78e0389b832c60f1d4a6a8cb9b505d9de4ffaf3b500de14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
d9538a960a8e6c753401fac349367ae3

SHA1
ad76a44af44975979e78c349aefb5bf6e39d35b5

SHA256
b7cba0ca5db4ea821bf3c2d589bfe34e2fc891089529a874a27612b74058be5c

SHA512
c6b0923b48e2b8e0bcd5a20648b30acbb2d7bc7d16379d577fe6ea1384b0240b4b4a8a4652d2c52ec49c4e2d93a330c47a3009c888ed627c9f7c94048993b9c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
03360921870cf3df6e4223be08c22060

SHA1
9dee4b585513ecc8ec3b1ffd0991d6667832af42

SHA256
356f228417b4ed4010e42bbacb279d2ae6f6445ec734fd0731be336a54f84dd6

SHA512
646aa18def7708dd5efd07cb7070d79057b039c2eaed34b9526d7b56e5873e3074d8bef28b2fd679d90b4b2a17f8c5c5631b2eac14e66fbcb9f2c8b18eb3bc94

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b0f6235628e8f6199f349281885b029a

SHA1
3db675c6eee6d8b7bd47dd3b04ece109facacbe8

SHA256
c451f319481883cbb16bfccb45a1a8291dde59057bcd797490ce390da53e79a6

SHA512
20cba6c4e3762067ec64e6f91a78f696467abd3ba1bf4d533aabb3017cc36403dca5118327d6296383fe4dd94e5fdd3a49dab829372ca38df1dbd2aa4e83a89b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
729b5fee0a1e18351b311245b63a17f1

SHA1
605b1b0cf5e056febf36c40f034e6cf457e53126

SHA256
edfaa81d258db0032363652c86302b554759f66c246be4e8ce8d7e8a0989cd0d

SHA512
4a07c090f28f48c23a654fc07ab755bb8f6779213c218b1d756694164cb454884d2990de2e185f26fd097a56205faaa3f6407094d5988f9d83447663929fbf6a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
de76effc7987934b532efe67b7b2d156

SHA1
27d05186f088295db5bed84aca8cbbd09be333c2

SHA256
942c637b4e2899f184eca167e20f920841d6a595b87fb2394632fe829a293f98

SHA512
a3a5bbb4888bcfdc086f23c4fc13d850aa4369eb4fc94d9a563ef99279cb809e5e3af69cb49b6f3e8552b7e21f035562aca0dad768e9e6e86ea0b204ea78183b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
53048d212e81ac086fce876889695be5

SHA1
4a01831e3cc37e4d117e571974cd415ff2e650cc

SHA256
e098166d816db2d738b53906ac21943303f530f29f08dee474f4680f418bf46d

SHA512
6e756772c206fe3652932a6dbf9356d304a3292fd11a6de5ba53a1b4f797570cdb6b0d3cf13fd320c73b80ae340d2a8bbb13dc33a4554f18845e7e45cfaea0d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
efca217643ee6bb56739a4692f29a583

SHA1
1d6e285acfbd68fabfabc59db8e739ef39a264c8

SHA256
c6759a42acebace25b132013c22f48d951689e1e3254c9ba507c2bf58e596438

SHA512
914c78dc4950558e039175911b7de94b8fa5a04f2189744927b8df490f4da594df6db40bd248c539bc63f87bf12e33c615a168377a9e5fba47e42f23db6d0ea6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
bf970e3600c8b6ea4c714e6a46e74838

SHA1
215ff55f4111b99a743aea461d90ac6762376db3

SHA256
7eafe6a4d3ba3439e5742029a4c7feff25222212c7934db084c7cff14058feb8

SHA512
371bea5ca0625baac7a6cd2621d6b5fe53ccff88e298bf92542d19f2d799ce93d830fdbaa070677537bceddbf7cf1f578b96f79c9418245436fbd753c70392b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
6338e51cf2d1cb4bfea21c7d81cb3dc3

SHA1
0049d2863f309423d889fed141ef1f146246ac82

SHA256
2636a794e74289532973b8f1f9c62a0009520dad49951c956dceba846835e0ac

SHA512
ffcbb8f086de4ca9b51f2a86ff75f283afd9a08ba7fdfc16b119f4b80e452579fed0c7d5eb02cda11e6d7c6762ca8d5a1e542e90e106020f530d755933fb3ea2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
0419f7d73589e87c8c57e77b2d9eb577

SHA1
eecf0babf3c1c90703dfda16a0e4f42a86c5814d

SHA256
d3a046e9874981fdadf508aff13c213a252311f64acc23d466671e9682cf6acc

SHA512
4aed1697a75206e4fa9dae364287a7212ba635f9b5c2be61fb173b954f7bc39c5fd21b3ae85fc4845460685a15a7bfc7cf3c80b26cf9228df2f35e82626bf8ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
5c97b661b22981f872c22605825396de

SHA1
32312bc93e61e36586ce51789ba006c17fe46c62

SHA256
d5cf33d777b146421d67a4334fc01cc6ea262cb0d46972cf8a1ab3ca5ba7d621

SHA512
bb6610c92b396b67d9d82a816a09a8e9313c74bc6cfeb311f2f02becc3c436b13d41cf17ef80a73517e200aee89097c9cb43cd469de9fef679b18dc0727782a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592a91.TMP

Filesize
48B

MD5
389d34baf14657250e171fdc72d49083

SHA1
0a40d9917c53ece6a04428badb00eba5f9cf8a6e

SHA256
9e2c6461a881765f4b7d9025c1a248861379846ce89ab7ab4c812a17a7778a65

SHA512
5fee5e16027c669a9235342efa216141c677ad39bec792367c1945330016e92538f467553fc30507af6d618198b61b43fff48f0fc01a52f516bc653c5eea1f1b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Filesize
99B

MD5
ba92e5bbca79ea378c3376187ae43eae

SHA1
f0947098577f6d0fe07422acbe3d71510289e2fc

SHA256
ccf4c13cd2433fe8a7add616c7d8e6b384cf441e4d948de5c6fc73e9315c619f

SHA512
aa1d8b7eb9add6c5ed5635295f501f950914affc3fa9aa1ee58167ed110f99a1760b05e4efb779df8e432eab1b2a0fc9cf9d67a05b2d5432ff8f82c620a38a62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Filesize
279B

MD5
f4e0d92aa6cdbc4bd2627ae3c5546ef0

SHA1
45c3e22eec62a675478bc5455fa6d2a7c057f0b7

SHA256
53f64fb6311c8f2c04238d1af93e03f5fa1e68ad598f04c73c1f8597ba943ed8

SHA512
18fc67b2f649b112b45956bbdcc4fade31a072b10b56f54b875f20c8a4750b2b56c65855f059e161995ffe3ca82622e9c0c22108abccb198848a0dde8db024cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13382468188614985

Filesize
1KB

MD5
3a2dce8a10a3a1cb11e5649dd70db84b

SHA1
85788a36d021b4cafe477bf5cd088d273970e080

SHA256
4df77160bc9edd89d712c862bc0f75e0def43694fb133aad3fcbdb3ec024e0e8

SHA512
6c131e2e1af3f7c4fc12c0949cc0a49feeb30072ca1d3959998dd66f35d0c642c5a46d7c698d0c7c179f64ef74a582d9c10cc6cfe1896d91ec49e1b46682d057

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Filesize
347B

MD5
766cd6fc14dfe151a723e852b77b5237

SHA1
b9ca12f53363e4460574f4fc2c8b9cd7ff7a40fb

SHA256
60fb4d9a3626cdfae09862f5f52d4aa17ec3e71ff3749329e4e750882cf8b9e4

SHA512
030f91a90675d4d0a3d2698d74b41cd25edb31dfea19735cb176e52ffdd801021a723fb6fa19f2f22f280f80dd3088ca9024ec339eda2a1c165be505b704ddeb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Filesize
326B

MD5
9b33a10dbb305767ff2c93f4612a1769

SHA1
5c455420a68dc10ddd781f546f27c8ed00d98716

SHA256
0fc368e16615670e974a022d7bc827c6ae1c3baeda1d25702a911751f37aa3dc

SHA512
d442a4c8425030f3a2472ddc739935fe985fb7bd246bc986360740b5c57a5180cc12958fcf1085769edc0499d4a7d76634d4a309b77a49d8fd14fbe5adbe52da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Top Sites

Filesize
20KB

MD5
f44dc73f9788d3313e3e25140002587c

SHA1
5aec4edc356bc673cba64ff31148b934a41d44c4

SHA256
2002c1e5693dd638d840bb9fb04d765482d06ba3106623ce90f6e8e42067a983

SHA512
e556e3c32c0bc142b08e5c479bf31b6101c9200896dd7fcd74fdd39b2daeac8f6dc9ba4f09f3c6715998015af7317211082d9c811e5f9e32493c9ecd888875d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3440ec11368e70a001bf0b4d2534be72

SHA1
57841ea75d36914784c15f1f6204e07dab2c5f78

SHA256
9a79362dfb69d1cb138517b941f32123c4b91a8488a0fecb29ae2282fd9cc651

SHA512
0213e410521ec62cb488fcaff4a8b90931d85c7082010d881cd9119d6d7f334c69d51a94f4f53cf989fed6706e1871389d7c2f827aa17590004fef389a7380c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
210884cbdd3b3c19b70810d143d89abf

SHA1
cf02985cb8796a03feee2aa1553848c10b806a99

SHA256
8d1db0df0f67df583914009e8a8b0c620a868982d14f2a5fc32c42ace254530b

SHA512
9d5e9ad78c7c9199726b631a2b76ee0f6aeccae3c6fa9221c2cbfb4be1b49910d0917f0dda5162af7f536aa9334562d82f9d4bf3881427331af4875ed61954cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe591301.TMP

Filesize
1KB

MD5
4b07a2d479da2814221822f9226438de

SHA1
71230393f393eb8286cc2b7025afd1396e146663

SHA256
cb5b85446be5e7c561fecde24a57734dd26e1a2b9becfd9568f4da72500ed774

SHA512
85ad75d5fb1e591c8b35f83161e7877f881d9c9769806b7bb2ef7d0cf9752a752e441f390d5cd352d6a7261df37ec1fd8adc242366f62e37386a0aa00a063a02

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Filesize
128KB

MD5
de425896abbe14fe05a0523c59d59624

SHA1
737744e483f8b2f838bee4688a6ba6ac147dc64b

SHA256
845f8b9b8785c62749241511438324fe4130b9c9626ac08e32ada1706d263fe8

SHA512
1d0f89361e1aea9a892b9ec82683248d31b25c5fc421d643db6dd8475f530a438eebc7133f13538e009a1d9a7da82fb245f7d56fc8252270d0e4c30d9120f7f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Filesize
116KB

MD5
f70aa3fa04f0536280f872ad17973c3d

SHA1
50a7b889329a92de1b272d0ecf5fce87395d3123

SHA256
8d782aa65de6db3538a14da82216e96d5e0a3c60496726e3541a8165bccc65f8

SHA512
30675c5c610d9aa32a4c4a4d9c3af7570823cd197f8d2a709222c78e2cd15304bbed80e233e3674ec2f6e33d1961c67fd6a46dc8ba8b1a301cd0722932c03c84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db

Filesize
4KB

MD5
d9f84c8cf73422f2ca07d7e7462b9534

SHA1
cff6e092bf5bf1f3f47b7074847e204042a881ae

SHA256
5bf7b14dde109f722782628bbcf3011a23cd2416e7621a62b49ee0333cdec6c2

SHA512
1ea893c62d64304c35b9086e2c7e760716ea5ce220bafb76632670fcd2f97eca5c6693ff98004a861b190060c47c9d97ac92b41e3b1da1a4e8f89d9638548c38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Filesize
905KB

MD5
cf470d0423c283cd0a7b12d20c39b8e2

SHA1
eddbba143a855e666e5decc5bbf886f998d4ac36

SHA256
47edf463480ffcb9143344719b10c318de0292f875480c4399471847dbcd8a16

SHA512
08bd35cf80ac0012ab1affbb6bf5705fc6d2fe3b915a117f6b880a0ac244390f15dba2386953f2dba48cb04f21275d180faa6024c42dde870ad23e871e2e2598

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Filesize
279B

MD5
183e394de44cfa103c2b55f33b7c039e

SHA1
addd2b1fe1f02f5c1f64ef91e15dd6d6eac13eb0

SHA256
b9d14489e744d5ca8659829418dda18eabf8e1c83a94ce9c6b1f244fb5ec90ec

SHA512
b3343278f3698d301ced8ef77d7e48a0d5e86540da144503e30f1cd467d3430fa8740beea1c284feb02bb5ddaa6cc06b26654d65c43203ed3c5e07dcacb34ca2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Filesize
160B

MD5
2e19a9040ed4a0c3ed82996607736b8f

SHA1
5a78ac2b74f385a12b019c420a681fd13e7b6013

SHA256
2eeb6d38d7aad1dc32e24d3ffd6438698c16a13efd1463d281c46b8af861a8ce

SHA512
86669994386b800888d4e3acb28ab36296594803824d78e095eb0c79642224f24aca5d2892596ac33b7a01b857367ed3a5e2c2fb3405f69a64eb8bf52c26753f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Filesize
297B

MD5
8aab6aaa3aca56eef764fd4e21052728

SHA1
bc67ab4c2e332b75f918853d038b79f45b8e8c37

SHA256
62af6ae849d953acfdc6357ec99e486b233c72fac06c42e09f65e83a156aebad

SHA512
f0216c4fb06c503e31cb27dad3cab0fccca31839bc07110552d174cdb6f88de603c51da40caf48297bcb31d6a4d3d4350ed7453c17dc117a0d5145bb16e92aba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_0

Filesize
44KB

MD5
262cebd85cf2803d9eff360b7dd48ae2

SHA1
56d84729dc9418fa66845eedcd2cc2db330ff686

SHA256
12ea5e68270ae302b236c8ed8715084010ffb87e020e95847db15cff9311036c

SHA512
e0638a6a01ade53d1b18cfd3aa7222bade0430a5b6a2c85692f188f3520d1ebd4ae78b62305163753d02b058650cf91057a6400469f1b42a016ec275f1d3c58d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1

Filesize
264KB

MD5
0d43eeeeeaaee74fbda3d54355ed5773

SHA1
84dc2642b9ce73db6063f4cbd239fba336f06de4

SHA256
a2e2a17b929614d6d85510a41e7ff8483e8a447fbe02ea4ca65a0b6150e1b0b9

SHA512
6d640eaa305f7b5d890fa76394f99f66fef413f1cbd92163119953cfcc85a3999ebeda5ff44f27e3aced4603e5dc4521504b41d88ebc4d36dad14a7c878f3163

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_3

Filesize
4.0MB

MD5
b39fc7097ca8c694e95c6366279344e9

SHA1
53958ff682fddbec5b908f9e1da1be10f6dd96c6

SHA256
453a1ca115d2f803b14027aac3ed696326b42a617f5f924dc096b1bbebe1204b

SHA512
51e4b405622e90b72db90056a889efb9e3730d0858de6a1e6ce50b918728cfd6b78af5dc982c37d529b15369ffc98f38c3a4db50ed599a8b04ec9494acb9b980

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

Filesize
11B

MD5
838a7b32aefb618130392bc7d006aa2e

SHA1
5159e0f18c9e68f0e75e2239875aa994847b8290

SHA256
ac3dd2221d90b09b795f1f72e72e4860342a4508fe336c4b822476eb25a55eaa

SHA512
9e350f0565cc726f66146838f9cebaaa38dd01892ffab9a45fe4f72e5be5459c0442e99107293a7c6f2412c71f668242c5e5a502124bc57cbf3b6ad8940cb3e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
8KB

MD5
3741f88ef862d9fe1522f3da92caeb84

SHA1
c1baff9e8f615bf0578ef9d6245a4e76696d9431

SHA256
028eca48040c4ac4752a50f8b65866834c7d76212d4d4bfec22e5c4a932c5830

SHA512
bdf5155a6ec6695528b0cfeb6f7ec9376c716cb6bd1286de8b54c1235e75848f34acde30b6102dc1e565c512838cd0902b791b9e0e90410f78f7f336436b05d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
9d9d1fe1418109fd7b2cae485a57acc4

SHA1
86f6891a7d87bb8020d2d87a921d751bd99270b6

SHA256
6db6de9a3c7480e91c40457df58e7633067c1a9265282cd727e4939d538ad40f

SHA512
28236df6b2c06e0155ddac7eee1217e8261d54b9e942e6985a31158607f02eb3c6ec69d80342a549adb5b87b06df2f02bfa793115e76efc13be16d4aa5c5973a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d434c6cb52a1992e5b6bef8b866df501

SHA1
954d552fd6c6a92bf417c25a64c8790d34a570a4

SHA256
2bb1c8dbdd5aabc13d89ed1d642a31629c811d5dd0b6c6b529c0e58f363e3ad7

SHA512
4813ace0f03c6de08bb97d612ad73efbeba5bd181667b76b24487d1c21c71323df7b1585504f996e68602353ff37964974a7cd3e38c9c443f2ed30cfcd05c998

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\remote\edgeSettings

Filesize
81B

MD5
f222079e71469c4d129b335b7c91355e

SHA1
0056c3003874efef229a5875742559c8c59887dc

SHA256
e713c1b13a849d759ebaa6256773f4f1d6dfc0c6a4247edaa726e0206ecacb00

SHA512
e5a49275e056b6628709cf6509a5f33f8d1d1e93125eaa6ec1c7f51be589fd3d8ea7a59b9639db586d76a994ad3dc452c7826e4ac0c8c689dd67ff90e33f0b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\remote\edgeSettings_2.0-2f9188b68640dbf72295f9083a21d674a314721ef06f82db281cbcb052ff8ec1

Filesize
126KB

MD5
6698422bea0359f6d385a4d059c47301

SHA1
b1107d1f8cc1ef600531ed87cea1c41b7be474f6

SHA256
2f9188b68640dbf72295f9083a21d674a314721ef06f82db281cbcb052ff8ec1

SHA512
d0cdb3fa21e03f950dbe732832e0939a4c57edc3b82adb7a556ebd3a81d219431a440357654dfea94d415ba00fd7dcbd76f49287d85978d12c224cbfa8c1ad8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\remote\synchronousLookupUris

Filesize
40B

MD5
6a3a60a3f78299444aacaa89710a64b6

SHA1
2a052bf5cf54f980475085eef459d94c3ce5ef55

SHA256
61597278d681774efd8eb92f5836eb6362975a74cef807ce548e50a7ec38e11f

SHA512
c5d0419869a43d712b29a5a11dc590690b5876d1d95c1f1380c2f773ca0cb07b173474ee16fe66a6af633b04cc84e58924a62f00dcc171b2656d554864bf57a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\remote\synchronousLookupUris_638343870221005468

Filesize
57B

MD5
3a05eaea94307f8c57bac69c3df64e59

SHA1
9b852b902b72b9d5f7b9158e306e1a2c5f6112c8

SHA256
a8ef112df7dad4b09aaa48c3e53272a2eec139e86590fd80e2b7cbd23d14c09e

SHA512
6080aef2339031fafdcfb00d3179285e09b707a846fd2ea03921467df5930b3f9c629d37400d625a8571b900bc46021047770bac238f6bac544b48fb3d522fb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\remote\topTraffic

Filesize
29B

MD5
52e2839549e67ce774547c9f07740500

SHA1
b172e16d7756483df0ca0a8d4f7640dd5d557201

SHA256
f81b7b9ce24f5a2b94182e817037b5f1089dc764bc7e55a9b0a6227a7e121f32

SHA512
d80e7351e4d83463255c002d3fdce7e5274177c24c4c728d7b7932d0be3ebcfeb68e1e65697ed5e162e1b423bb8cdfa0864981c4b466d6ad8b5e724d84b4203b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\remote\topTraffic_638004170464094982

Filesize
450KB

MD5
e9c502db957cdb977e7f5745b34c32e6

SHA1
dbd72b0d3f46fa35a9fe2527c25271aec08e3933

SHA256
5a6b49358772db0b5c682575f02e8630083568542b984d6d00727740506569d4

SHA512
b846e682427cf144a440619258f5aa5c94caee7612127a60e4bd3c712f8ff614da232d9a488e27fc2b0d53fd6acf05409958aea3b21ea2c1127821bd8e87a5ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres

Filesize
4KB

MD5
0c6b1201cf29ce111fc40f54fe60e8a5

SHA1
c2ba7b497d23403921dc330bf0a095f7bfdae8c2

SHA256
00e3cc1fefb614efd9fd1b9d4d2423fbce2e179ba6904a78a926c7a1208ca285

SHA512
74e3b4a79ad1d004a41f866e73a1ddc2d8b6e1da3e858d20ff16a2d83164fa1df7bfdd84d0aa8d4549e6fef1fbf738d9d6762c578748d6ba547aa3e88c93a0ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

Filesize
2KB

MD5
52189833174806988f17d00ccd28df9b

SHA1
819b9c13fe50c4668ea3745a64070c89ee7d7feb

SHA256
a07f4d29e03ecb871872907989dd1d61d5692a0612e348ece05394bc408276fe

SHA512
12fd7675f45e09a6a5e4876eb8605785aa46105d8b2ac5ff2a8b433b068a40afd2b7f39f747ae4c5c1d5d76366f905f9df11f1c6fce1fc1ab7ddb8310604d0a0

Download Submit
C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202501271618231\additional_file0.tmp

Filesize
1.4MB

MD5
e9a2209b61f4be34f25069a6e54affea

SHA1
6368b0a81608c701b06b97aeff194ce88fd0e3c0

SHA256
e950f17f4181009eeafa9f5306e8a9dfd26d88ca63b1838f44ff0efc738e7d1f

SHA512
59e46277ca79a43ed8b0a25b24eff013e251a75f90587e013b9c12851e5dd7283b6172f7d48583982f6a32069457778ee440025c1c754bf7bb6ce8ae1d2c3fc5

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zSCAEB4A19\setup.exe

Filesize
7.3MB

MD5
0964e495fe984bc57511aa48d131db03

SHA1
8e06cff4944acbf10df2afa65a419ed3b2baac9d

SHA256
587bf26aa9b6fc20e9b844b2ec9fd73cc30ae6b2deeb33bce082ea96da719175

SHA512
0eb44c7649de6f770a408919100db2abcef670ca04dcc8b27d244a96e78d1c422921f439cfd485cca069a87147f6636587a6d6aa36b0cf167260a00f9e073d46

Download Submit
C:\Users\Admin\AppData\Local\Temp\Opera_installer_2501271618098355964.dll

Filesize
6.8MB

MD5
50c59feae31ec36e5f5ec12fa08a5072

SHA1
3e1c1764adcb8bd77132731bf5c053993d9bd0cf

SHA256
291a44e2302dcfb40e8c90676e6c21452094877513d7751e2590920e6b96574d

SHA512
3ac31be3c847aeada3c80df01d5225ff98583024dbbc4ad184804b13f2e35ca789d4bd38d5fe5825941edcf99c43f4a7b711356545a1590b4bb4d56727b24a4a

Download Submit
C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat

Filesize
40B

MD5
b03b6e207d623f982e46d39697f3c396

SHA1
e8787121c5aaad8d7a1e8370b615f3cf59f0ee2e

SHA256
47f5b63a892e2c5a6ce9a1d827db4949f02ae9156c1e9d8dd289239bc4763f38

SHA512
2dd3716d1f50bb3164203a6483393c02982525e6a416500fafa334b28f95538b7199d7b4836f5bed538f827c4baa7628c3e8426ac799dc4e250a4cd976fd99eb

Download Submit
C:\Users\Admin\Downloads\OperaGXSetup.exe

Filesize
3.8MB

MD5
e569289367578273522236e9794916c4

SHA1
4804ef69e2938518c6c904a08daa76bf27bcfa7e

SHA256
5b59cf5ddb7698f3f9846fc15c410119c905dd37c08562cb53fad5c5822defaf

SHA512
53e18a538824832f84f80bef17304fcd0f2b169f3a62160bb1738483574387687f3a3d2dba791a0ae399ab01fb265af7142e6233d69b8813d92b69ee17132c78

Download Submit