Overview

overview

9

Static

static

1

URLScan

urlscan

1

https://cleansoftwar...

windows11-21h2-x64

9

Resubmissions

18/04/2026, 03:49

260418-edtkjsav3l9

15/04/2026, 00:40

260415-a1fjzsgs7s9

Analysis

  • user interaction
    yes
  • max time kernel
    267s
  • max time network
    268s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    18/04/2026, 03:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://cleansoftwaredl.com/lp?id=ByteBreaker%20V1_21362453&t=ZV5aU2BUQEJAXQ==
  • Sample260418-edtkjsav3l
Score
9/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationransomwarespywarestealerthemidatrojan

Malware Config

Signatures

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
    defense_evasion
  • Downloads MZ/PE file 3 IoCs
  • Checks BIOS information in registry 2 TTPs 2 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Themida packer 3 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Contacts third-party web service commonly abused for C2 1 TTPs 9 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Drops file in Windows directory 25 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 2 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 62 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • NTFS ADS 3 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 35 IoCs
  • Suspicious use of AdjustPrivilegeToken 13 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 50 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cleansoftwaredl.com/lp?id=ByteBreaker%20V1_21362453&t=ZV5aU2BUQEJAXQ==
    1⤵
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4668
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2b4,0x7ffba218c188,0x7ffba218c194,0x7ffba218c1a0
      2⤵
        PID:4560
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,17152506898732009783,6062652936153581113,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:11
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:3284
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,13030778855114954547,17635024495599670413,262144 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:2
        2⤵
          PID:2752
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,4504978334452951200,12268065408731205233,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:13
          2⤵
            PID:4364
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,3908758590716175028,2383138856323244405,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
            2⤵
              PID:4732
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,6324704646769642606,11601781925577892639,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
              2⤵
                PID:4708
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=2364,i,8967526916060078173,10519631206098239981,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
                2⤵
                  PID:5040
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4152,i,17981742678339660035,5547669292942508846,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:9
                  2⤵
                    PID:4300
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4172,i,9680828148274709587,15762966994527995106,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
                    2⤵
                      PID:3636
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4292,i,562995329887991503,10309446071114175902,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:9
                      2⤵
                        PID:2240
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,4913126218350052876,7902525194864423260,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
                        2⤵
                          PID:4900
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,9212049630350253505,11970103726463333775,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:14
                          2⤵
                            PID:4712
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,7799339398191353383,11111709222007068175,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:14
                            2⤵
                              PID:5044
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,8094490463588066040,10654733521710621546,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
                              2⤵
                                PID:1500
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,9896224200942123749,1879748669478214389,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
                                2⤵
                                • Suspicious use of WriteProcessMemory
                                PID:4832
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                  cookie_exporter.exe --cookie-json=1140
                                  3⤵
                                    PID:2428
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,15043695038584915642,7121110963094647571,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:14
                                  2⤵
                                    PID:2520
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,15043695038584915642,7121110963094647571,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:14
                                    2⤵
                                      PID:4348
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,8642806848542060945,16369749603495570612,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
                                      2⤵
                                        PID:956
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,6620366731295690912,3768398811470081112,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
                                        2⤵
                                          PID:2072
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6656,i,5224375314375655101,13979399946276440994,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:14
                                          2⤵
                                            PID:1640
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6484,i,1645300349188527583,10188772949577741131,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:14
                                            2⤵
                                              PID:3852
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,12352064224192267304,16507113892655698361,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
                                              2⤵
                                                PID:2964
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6976,i,5361223241470803526,16653803988766405379,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:14
                                                2⤵
                                                  PID:4000
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=4888,i,9872550889257657119,14643798256279233008,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:1
                                                  2⤵
                                                    PID:4064
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5240,i,1024312443434744953,5546786183424640732,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
                                                    2⤵
                                                      PID:3572
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=3864,i,12001277437954022968,2251219300610874893,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:1
                                                      2⤵
                                                        PID:5300
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4664,i,17952979812421265498,1440579129516707692,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:12
                                                        2⤵
                                                          PID:236
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=4188,i,3178347254272050901,14798373616265311623,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:1
                                                          2⤵
                                                            PID:5192
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=3652,i,12388426790933191715,5539689045172379497,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:1
                                                            2⤵
                                                              PID:5364
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6400,i,1051288001943785063,6328486847290430240,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
                                                              2⤵
                                                                PID:5460
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6696,i,2059082969943425643,16404483365269863105,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:14
                                                                2⤵
                                                                  PID:5632
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,18446165090388114422,16101031791615704247,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:14
                                                                  2⤵
                                                                    PID:5644
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6760,i,4232841350871988471,204061117084830070,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:14
                                                                    2⤵
                                                                      PID:5656
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5424,i,6350802307785937944,1204856424064363286,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:1
                                                                      2⤵
                                                                        PID:5780
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=6716,i,5255873774497050327,15017311962944310219,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
                                                                        2⤵
                                                                          PID:5840
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,11787210343286541534,73994172240064241,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=1820 /prefetch:14
                                                                          2⤵
                                                                            PID:5968
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=5584,i,8057612235960603603,10733258859998007167,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:1
                                                                            2⤵
                                                                              PID:5980
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,1802656849729715351,1696154163546120348,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:14
                                                                              2⤵
                                                                              • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                                              • NTFS ADS
                                                                              PID:5932
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=4732,i,13625075089705876713,910969928160818862,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:1
                                                                              2⤵
                                                                                PID:6032
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=4832,i,16295797392532244378,12966007706713639314,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:1
                                                                                2⤵
                                                                                  PID:4428
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7136,i,9615634749798095202,16582404746725704043,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:1
                                                                                  2⤵
                                                                                    PID:5076
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7172,i,2162741741709950279,14188464884174599570,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6768 /prefetch:14
                                                                                    2⤵
                                                                                    • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                                                    • NTFS ADS
                                                                                    PID:1752
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7704,i,17931113124293955666,14490561369603685387,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=8016 /prefetch:14
                                                                                    2⤵
                                                                                      PID:3508
                                                                                    • C:\Users\Admin\Downloads\ByteBreaker V1_48425771.exe
                                                                                      "C:\Users\Admin\Downloads\ByteBreaker V1_48425771.exe"
                                                                                      2⤵
                                                                                      • Downloads MZ/PE file
                                                                                      • Executes dropped EXE
                                                                                      • Drops file in Program Files directory
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      • Modifies registry class
                                                                                      PID:5220
                                                                                      • C:\Users\Admin\AppData\Local\OperaGX_48425771.exe
                                                                                        C:\Users\Admin\AppData\Local\OperaGX_48425771.exe --silent --allusers=0
                                                                                        3⤵
                                                                                        • Executes dropped EXE
                                                                                        • System Location Discovery: System Language Discovery
                                                                                        PID:5316
                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS4C4F4689\installer.exe
                                                                                          C:\Users\Admin\AppData\Local\Temp\7zS4C4F4689\installer.exe --silent --allusers=0 --server-tracking-blob=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
                                                                                          4⤵
                                                                                          • Executes dropped EXE
                                                                                          • Enumerates connected drives
                                                                                          • Enumerates system info in registry
                                                                                          • Modifies system certificate store
                                                                                          PID:5536
                                                                                          • C:\Users\Admin\AppData\Local\Temp\7zS4C4F4689\installer.exe
                                                                                            C:\Users\Admin\AppData\Local\Temp\7zS4C4F4689\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff7f66ae6d8,0x7ff7f66ae6e4,0x7ff7f66ae6f0
                                                                                            5⤵
                                                                                            • Executes dropped EXE
                                                                                            PID:1064
                                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\installer.exe
                                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\installer.exe" --version
                                                                                            5⤵
                                                                                            • Executes dropped EXE
                                                                                            PID:3912
                                                                                          • C:\Users\Admin\AppData\Local\Temp\7zS4C4F4689\installer.exe
                                                                                            "C:\Users\Admin\AppData\Local\Temp\7zS4C4F4689\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=5536 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_20260418045131" --session-guid=77982a30-7f83-4c82-9a60-9cacfbf53e43 --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=3007000000000000
                                                                                            5⤵
                                                                                            • Executes dropped EXE
                                                                                            • Enumerates connected drives
                                                                                            PID:1108
                                                                                            • C:\Users\Admin\AppData\Local\Temp\7zS4C4F4689\installer.exe
                                                                                              C:\Users\Admin\AppData\Local\Temp\7zS4C4F4689\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x28c,0x290,0x294,0x25c,0x298,0x7ff7f66ae6d8,0x7ff7f66ae6e4,0x7ff7f66ae6f0
                                                                                              6⤵
                                                                                              • Executes dropped EXE
                                                                                              PID:4772
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe" --backend --initial-pid=5536 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311" --session-guid=77982a30-7f83-4c82-9a60-9cacfbf53e43 --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=130.0.5847.58
                                                                                              6⤵
                                                                                              • Executes dropped EXE
                                                                                              • Enumerates connected drives
                                                                                              • Enumerates system info in registry
                                                                                              • Modifies registry class
                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                              PID:5876
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff72b71e6d8,0x7ff72b71e6e4,0x7ff72b71e6f0
                                                                                                7⤵
                                                                                                • Executes dropped EXE
                                                                                                PID:3324
                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\assistant\assistant_installer.exe
                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                                                                                                7⤵
                                                                                                • Executes dropped EXE
                                                                                                • Loads dropped DLL
                                                                                                • Adds Run key to start application
                                                                                                • System Location Discovery: System Language Discovery
                                                                                                • Enumerates system info in registry
                                                                                                • Modifies Internet Explorer settings
                                                                                                PID:5752
                                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\assistant\assistant_installer.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xcb4040,0xcb404c,0xcb4058
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                  PID:5684
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:4900
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xee4040,0xee404c,0xee4058
                                                                                                    9⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                    PID:6000
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                                                                                    9⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                    • Suspicious use of FindShellTrayWindow
                                                                                                    • Suspicious use of SendNotifyMessage
                                                                                                    PID:5932
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                      10⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • Loads dropped DLL
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:3332
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffb7a45c540,0x7ffb7a45c550,0x7ffb7a45c560
                                                                                                        11⤵
                                                                                                        • Executes dropped EXE
                                                                                                        PID:3912
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                      10⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • Loads dropped DLL
                                                                                                      PID:3840
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffb7a45c540,0x7ffb7a45c550,0x7ffb7a45c560
                                                                                                        11⤵
                                                                                                        • Executes dropped EXE
                                                                                                        PID:5060
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x147d830,0x147d83c,0x147d848
                                                                                                      10⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • Loads dropped DLL
                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                      PID:2172
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                        11⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • Loads dropped DLL
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:1304
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x14c,0x150,0x154,0x148,0x158,0x7ffb7a45c540,0x7ffb7a45c550,0x7ffb7a45c560
                                                                                                          12⤵
                                                                                                          • Executes dropped EXE
                                                                                                          PID:1128
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                        11⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • Loads dropped DLL
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:2104
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffb7a45c540,0x7ffb7a45c550,0x7ffb7a45c560
                                                                                                          12⤵
                                                                                                          • Executes dropped EXE
                                                                                                          PID:228
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                        11⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • Loads dropped DLL
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:2508
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffb7a45c540,0x7ffb7a45c550,0x7ffb7a45c560
                                                                                                          12⤵
                                                                                                          • Executes dropped EXE
                                                                                                          PID:2684
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                                                                                7⤵
                                                                                                • Executes dropped EXE
                                                                                                • Loads dropped DLL
                                                                                                • Adds Run key to start application
                                                                                                • Drops file in Windows directory
                                                                                                • Checks processor information in registry
                                                                                                • Enumerates system info in registry
                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                                • Suspicious use of FindShellTrayWindow
                                                                                                • Suspicious use of SendNotifyMessage
                                                                                                PID:5448
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffb7a45c540,0x7ffb7a45c550,0x7ffb7a45c560
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  PID:364
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,439986927640267636,8049725418141941581,262144 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1772 /prefetch:2
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:5436
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=1968,i,16207245568644635040,2707301927135261488,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2076 /prefetch:11
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • System Time Discovery
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:5788
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2272,i,7393838239709030016,5808710963521215621,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2280 /prefetch:13
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:2628
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3120,i,12387268837005287689,14575884488079743752,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3332 /prefetch:14
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:5336
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3096,i,9250590466285763301,3062655244677924869,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3292 /prefetch:14
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:5420
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3080,i,2845422327150889828,16048675869919200035,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3272 /prefetch:14
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:3348
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3108,i,5377970236083155472,6675811210159894072,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3312 /prefetch:14
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  PID:5760
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3140,i,17792126082615031400,7042904570019242113,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3352 /prefetch:14
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:5580
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3152,i,10089755352137822800,7265308348104710198,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3372 /prefetch:14
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:5568
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3664,i,11305172766956886318,1637609791784759602,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3832 /prefetch:1
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  PID:6240
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_gx_splash.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  PID:6404
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4560,i,4092063880807809739,2883404796672565370,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4572 /prefetch:1
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:6740
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4796,i,9592251539205539991,12304938578489452643,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4808 /prefetch:9
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:6768
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4940,i,11621487798285895757,12096832232941387358,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4976 /prefetch:1
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  PID:6808
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5116,i,8171547988015852619,16203449445485593229,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5096 /prefetch:1
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  PID:6832
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5240,i,7790780343970467937,16955947735856135541,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5236 /prefetch:14
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:6844
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5248,i,11199184673200492274,8800066065298140546,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5244 /prefetch:14
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:6852
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5252,i,4450798503315077169,10194483304305271131,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=1736 /prefetch:14
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:6868
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5256,i,7777214528217669451,17441442262168694787,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5272 /prefetch:14
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:6892
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5936,i,11963028487579850349,12196401630575869487,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=5940 /prefetch:1
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:7008
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6100,i,5598843228494938788,7685165722938034316,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6104 /prefetch:9
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:7028
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6656,i,16378690487234855857,3771393398147095755,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6668 /prefetch:9
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  PID:7128
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7092,i,913489335123212611,15515609130707294477,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7148 /prefetch:9
                                                                                                  8⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:7144
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7024,i,12151246673648120328,11635755225101002997,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7256 /prefetch:9
                                                                                                  8⤵
                                                                                                    PID:2396
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6856,i,3254249639257362615,17775665320827122660,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6232 /prefetch:1
                                                                                                    8⤵
                                                                                                    • Executes dropped EXE
                                                                                                    PID:7684
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7456,i,6232298716181336630,7073856882705640637,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6980 /prefetch:1
                                                                                                    8⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:7700
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6872,i,9374847892512568815,12958556356718604573,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=5704 /prefetch:12
                                                                                                    8⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:8088
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7960,i,17574381922242889428,11183795351323502558,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7900 /prefetch:14
                                                                                                    8⤵
                                                                                                    • Executes dropped EXE
                                                                                                    PID:6940
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8096,i,6276756398240931950,8570166276074558338,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8108 /prefetch:14
                                                                                                    8⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:6948
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8128,i,10430259352091200910,18112072689561934085,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8264 /prefetch:14
                                                                                                    8⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:6272
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8272,i,3776833673136735326,14650709278555842582,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8412 /prefetch:14
                                                                                                    8⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:6220
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8420,i,9992053249249804923,14936434667130705612,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8560 /prefetch:14
                                                                                                    8⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:7004
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8704,i,1582842549767299539,9456668799806886804,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8716 /prefetch:14
                                                                                                    8⤵
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:6896
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6868,i,1820953920707659571,17079406089097754107,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8912 /prefetch:14
                                                                                                    8⤵
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:5000
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8928,i,13876060248709346180,8498018329794160146,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8948 /prefetch:14
                                                                                                    8⤵
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:5596
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=4784,i,13787160900161278704,3434899663132383100,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9180 /prefetch:14
                                                                                                    8⤵
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:1988
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9212,i,7924321611278061225,15586376018241031458,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9336 /prefetch:14
                                                                                                    8⤵
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:3264
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9936,i,9191313952901053415,8727536720170603825,2097152 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9944 /prefetch:9
                                                                                                    8⤵
                                                                                                      PID:7192
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9900,i,9376213898539513110,12610956394467661524,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10092 /prefetch:14
                                                                                                      8⤵
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:7216
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9916,i,7084050275104336226,17137013258375998415,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10248 /prefetch:14
                                                                                                      8⤵
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:7228
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10388,i,7176003214934949624,726403701208342356,524288 --field-trial-handle=1776,i,14719196625728496413,5024433221860852544,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1804,i,12783539502098115633,3932480279759355181,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10400 /prefetch:14
                                                                                                      8⤵
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:6764
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                                                                      8⤵
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:8208
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x284,0x288,0x28c,0x218,0x290,0x7ff64901d738,0x7ff64901d744,0x7ff64901d750
                                                                                                        9⤵
                                                                                                          PID:7956
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --edition=std-2 --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=130.0.5847.58 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --firstrunver=130.0.5847.58 --firstrunts=1776484340 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV9
                                                                                                        8⤵
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:2120
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff64901d738,0x7ff64901d744,0x7ff64901d750
                                                                                                          9⤵
                                                                                                            PID:7468
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\assistant\Opera_GX_assistant_130.0.5847.58_Setup.exe_sfx.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\assistant\Opera_GX_assistant_130.0.5847.58_Setup.exe_sfx.exe"
                                                                                                    5⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                    PID:5796
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\assistant\assistant_installer.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\assistant\assistant_installer.exe" --version
                                                                                                    5⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:5988
                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\assistant\assistant_installer.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xcb4040,0xcb404c,0xcb4058
                                                                                                      6⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • Loads dropped DLL
                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                      PID:3720
                                                                                              • C:\Windows\SysWOW64\NOTEPAD.EXE
                                                                                                "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                                                3⤵
                                                                                                • System Location Discovery: System Language Discovery
                                                                                                • Opens file in notepad (likely ransom note)
                                                                                                PID:3876
                                                                                              • C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe
                                                                                                "C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe" -c:1538 -t:InstallUnion
                                                                                                3⤵
                                                                                                • Executes dropped EXE
                                                                                                • System Location Discovery: System Language Discovery
                                                                                                PID:4960
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4104,i,6300122625278202465,14238071659375533494,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6804 /prefetch:14
                                                                                              2⤵
                                                                                                PID:3384
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7296,i,3674262582489678678,5430061106287393123,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:14
                                                                                                2⤵
                                                                                                  PID:1304
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8268,i,238970973916930972,7315831959245040205,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:14
                                                                                                  2⤵
                                                                                                    PID:5592
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5996,i,6452897659961116859,18235660738631155938,262144 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:10
                                                                                                    2⤵
                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                    PID:5576
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,6673434574236093576,7125507016390009390,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
                                                                                                    2⤵
                                                                                                      PID:6944
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,13284689700055049467,2789384241304561202,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:14
                                                                                                      2⤵
                                                                                                        PID:6484
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4180,i,2664383703477980463,12591294390672808379,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:14
                                                                                                        2⤵
                                                                                                          PID:7836
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3368,i,16720943905922885140,7399799005838581616,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=7992 /prefetch:14
                                                                                                          2⤵
                                                                                                            PID:7524
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8000,i,7112006293674802548,16197107925772758995,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:14
                                                                                                            2⤵
                                                                                                              PID:2976
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=5528,i,14243566965149760058,13981994972801699297,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:8452
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=6836,i,18313957468270991670,966790357604259133,2097152 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:8388
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,2321719077269012438,17096897378583848027,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:14
                                                                                                                  2⤵
                                                                                                                  • NTFS ADS
                                                                                                                  PID:900
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3364,i,3041025528981931332,8878744470091443829,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:14
                                                                                                                  2⤵
                                                                                                                    PID:6060
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6648,i,14736526515913427396,3616930965406095723,524288 --field-trial-handle=2084,i,10296453530872285342,8728356114749488094,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:14
                                                                                                                    2⤵
                                                                                                                      PID:6936
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                    1⤵
                                                                                                                      PID:1748
                                                                                                                    • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                      C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                      1⤵
                                                                                                                        PID:3108
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"
                                                                                                                        1⤵
                                                                                                                        • Executes dropped EXE
                                                                                                                        • Loads dropped DLL
                                                                                                                        • Enumerates system info in registry
                                                                                                                        PID:6608
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffb7a45c540,0x7ffb7a45c550,0x7ffb7a45c560
                                                                                                                          2⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:6628
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                                                                        1⤵
                                                                                                                          PID:6856
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff64901d738,0x7ff64901d744,0x7ff64901d750
                                                                                                                            2⤵
                                                                                                                              PID:8464
                                                                                                                          • C:\Windows\System32\rundll32.exe
                                                                                                                            C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                            1⤵
                                                                                                                              PID:3944
                                                                                                                            • C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe
                                                                                                                              "C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe"
                                                                                                                              1⤵
                                                                                                                              • Identifies VirtualBox via ACPI registry values (likely anti-VM)
                                                                                                                              • Checks BIOS information in registry
                                                                                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                                              PID:8840
                                                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=ByteBreaker.exe --webview-exe-version=1.0.0.0 --user-data-dir="C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=8840.8400.9947755674841663987
                                                                                                                                2⤵
                                                                                                                                • Drops file in Windows directory
                                                                                                                                • Enumerates system info in registry
                                                                                                                                • Modifies data under HKEY_USERS
                                                                                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                PID:8932
                                                                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffb928db078,0x7ffb928db084,0x7ffb928db090
                                                                                                                                  3⤵
                                                                                                                                    PID:6612
                                                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView" --webview-exe-name=ByteBreaker.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1688,i,12792823753911482592,13753429238160489321,262144 --variations-seed-version --mojo-platform-channel-handle=1632 /prefetch:2
                                                                                                                                    3⤵
                                                                                                                                      PID:6380
                                                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView" --webview-exe-name=ByteBreaker.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2004,i,12792823753911482592,13753429238160489321,262144 --variations-seed-version --mojo-platform-channel-handle=1856 /prefetch:11
                                                                                                                                      3⤵
                                                                                                                                        PID:6500
                                                                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView" --webview-exe-name=ByteBreaker.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1696,i,12792823753911482592,13753429238160489321,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:13
                                                                                                                                        3⤵
                                                                                                                                          PID:7812
                                                                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView" --webview-exe-name=ByteBreaker.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3516,i,12792823753911482592,13753429238160489321,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
                                                                                                                                          3⤵
                                                                                                                                            PID:3348

                                                                                                                                      Network

                                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                                            Reconnaissance

                                                                                                                                            Resource Development

                                                                                                                                            Initial Access

                                                                                                                                            Execution

                                                                                                                                            Persistence

                                                                                                                                            Boot or Logon Autostart Execution

                                                                                                                                            1
                                                                                                                                            T1547

                                                                                                                                            Registry Run Keys / Startup Folder

                                                                                                                                            1
                                                                                                                                            T1547.001

                                                                                                                                            Event Triggered Execution

                                                                                                                                            1
                                                                                                                                            T1546

                                                                                                                                            Component Object Model Hijacking

                                                                                                                                            1
                                                                                                                                            T1546.015

                                                                                                                                            Privilege Escalation

                                                                                                                                            Boot or Logon Autostart Execution

                                                                                                                                            1
                                                                                                                                            T1547

                                                                                                                                            Registry Run Keys / Startup Folder

                                                                                                                                            1
                                                                                                                                            T1547.001

                                                                                                                                            Event Triggered Execution

                                                                                                                                            1
                                                                                                                                            T1546

                                                                                                                                            Component Object Model Hijacking

                                                                                                                                            1
                                                                                                                                            T1546.015

                                                                                                                                            Defense Evasion

                                                                                                                                            Modify Registry

                                                                                                                                            3
                                                                                                                                            T1112

                                                                                                                                            Subvert Trust Controls

                                                                                                                                            2
                                                                                                                                            T1553

                                                                                                                                            Install Root Certificate

                                                                                                                                            1
                                                                                                                                            T1553.004

                                                                                                                                            SIP and Trust Provider Hijacking

                                                                                                                                            1
                                                                                                                                            T1553.003

                                                                                                                                            Virtualization/Sandbox Evasion

                                                                                                                                            1
                                                                                                                                            T1497

                                                                                                                                            Credential Access

                                                                                                                                            Credentials from Password Stores

                                                                                                                                            1
                                                                                                                                            T1555

                                                                                                                                            Credentials from Web Browsers

                                                                                                                                            1
                                                                                                                                            T1555.003

                                                                                                                                            Unsecured Credentials

                                                                                                                                            1
                                                                                                                                            T1552

                                                                                                                                            Credentials In Files

                                                                                                                                            1
                                                                                                                                            T1552.001

                                                                                                                                            Discovery

                                                                                                                                            Browser Information Discovery

                                                                                                                                            1
                                                                                                                                            T1217

                                                                                                                                            Network Share Discovery

                                                                                                                                            1
                                                                                                                                            T1135

                                                                                                                                            Peripheral Device Discovery

                                                                                                                                            1
                                                                                                                                            T1120

                                                                                                                                            Query Registry

                                                                                                                                            7
                                                                                                                                            T1012

                                                                                                                                            System Information Discovery

                                                                                                                                            5
                                                                                                                                            T1082

                                                                                                                                            System Location Discovery

                                                                                                                                            1
                                                                                                                                            T1614

                                                                                                                                            System Language Discovery

                                                                                                                                            1
                                                                                                                                            T1614.001

                                                                                                                                            System Time Discovery

                                                                                                                                            1
                                                                                                                                            T1124

                                                                                                                                            Virtualization/Sandbox Evasion

                                                                                                                                            1
                                                                                                                                            T1497

                                                                                                                                            Lateral Movement

                                                                                                                                            Collection

                                                                                                                                            Data from Local System

                                                                                                                                            1
                                                                                                                                            T1005

                                                                                                                                            Command and Control

                                                                                                                                            Web Service

                                                                                                                                            1
                                                                                                                                            T1102

                                                                                                                                            Exfiltration

                                                                                                                                            Impact

                                                                                                                                            Replay Monitor

                                                                                                                                            Loading Replay Monitor...

                                                                                                                                            Downloads

                                                                                                                                            8A7891822FCFF127E4EADADE9757112B
                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8A7891822FCFF127E4EADADE9757112B
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 879fde41d1cf7801d2c8b5eaeab062e6f01c494ceaf8c30e80c38c76cc6e87d5
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 71ccd39de69ec147afd8ad4337a36829dcababbf40897250380c7770de551242
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                            • Size 528B
                                                                                                                                            • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            8A7891822FCFF127E4EADADE9757112B
                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8A7891822FCFF127E4EADADE9757112B
                                                                                                                                            • Size 246B
                                                                                                                                            • SHA256 ddbf756ef593f015823530b4c15adaef5f3524465facb8e3acd4d097243b974e
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                            • Size 174B
                                                                                                                                            • SHA256 094e122eb9b6a81f1cfbde66a556dc9efee44fe4020ebd257f6a50f8e5c9166f
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                            • Size 170B
                                                                                                                                            • SHA256 77f474be14c72347fe3dae09ff719383bbbda55fc72995e316412715223d7089
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            blocklist
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                            • Size 105KB
                                                                                                                                            • SHA256 f00ccd228daef1e7764629352f6409e7c411bd43dff6a14e6176681c9e065b7d
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            protocols.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            settings.dat
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                            • Size 280B
                                                                                                                                            • SHA256 72b205beb453f50e17a365601deeef9544c1fb0a6c7471fff4fe6b93111db2cf
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            BookmarkMergedSurfaceOrdering
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                            • Size 6B
                                                                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            f_000077
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
                                                                                                                                            • Size 16KB
                                                                                                                                            • SHA256 47005cd93ae3c54bf79181db00d6040af2bebc4e1a75f44e4a877ac66bfa0695
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            the-real-index
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 72447a3ecba2ec9eb6165f1b36e3d133915685d244be5c4c3cf2c4aec96e49c8
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            the-real-index
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 1a0687de0b6ae51e00a6d40f4e01a845f96bd1c18949a6e29ecbd4f1c45b69c1
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            SiteList-Enterprise.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                            • Size 2B
                                                                                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            128.png
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\128.png
                                                                                                                                            • Size 4KB
                                                                                                                                            • SHA256 41b21cd721317759a1391ec66ec4606b1f1b0a66fc6542ec3e69f9a6ba9a60d3
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\af\messages.json
                                                                                                                                            • Size 908B
                                                                                                                                            • SHA256 b40bde5b612cfff936370b32fb0c58cc205fc89937729504c6c0b527b60e2cba
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\am\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 3d0361a85adfcd35d0de74135723a75b646965e775188f7dcdd35e3e42db788e
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ar\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 abd0919121956ab535e6a235de67764f46cfc944071fcf2302148f5fb0e8c65a
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\as\messages.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 01b549ef285c94b31891997c7d5728bee7b56040f8847f279fc46e5cc262c4e3
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\az\messages.json
                                                                                                                                            • Size 977B
                                                                                                                                            • SHA256 628145f4281fa825d75f1e332998904466abd050e8b0dc8bb9b6a20488d78a66
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\be\messages.json
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 ddf16859a15f3eb3334d6241975ca3988ac3eafc3d96452ac3a4afd3644c8550
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\bg\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 ac4a8b5b7c0b0dd1c07910f30dcfbdf1bcb701cfcfd182b6153fd3911d566c0e
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\bn\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 1dbf38e425c5c7fc39e8077a837df0443692463ba1fbe94e288ab5a93242c46e
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ca\messages.json
                                                                                                                                            • Size 930B
                                                                                                                                            • SHA256 d6e65238187a430ff29d4c10cf1c46b3f0fa4b91a5900a17c5dfd16e67ffc9bd
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\cs\messages.json
                                                                                                                                            • Size 913B
                                                                                                                                            • SHA256 21ae66ce537095408d21670585ad12599b0f575ff2cb3ee34e3a48f8cc71cfab
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\cy\messages.json
                                                                                                                                            • Size 806B
                                                                                                                                            • SHA256 a482663292a913b02a9cde4635c7c92270bf3c8726fd274475dc2c490019a7c9
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\da\messages.json
                                                                                                                                            • Size 883B
                                                                                                                                            • SHA256 48847d57c75af51a44cbf8f7ef1a4496c2007e58ed56d340724fda1604ff9195
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\de\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 36ac525fa6e28f18572d71d75293970e0e1ead68f358c20da4fdc643eea2c1c5
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\el\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 37ca6ab271d6e7c9b00b846fdb969811c9ce7864a85b5714027050795ea24f00
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\en_GB\messages.json
                                                                                                                                            • Size 848B
                                                                                                                                            • SHA256 ab5cda04013dce0195e80af714fbf3a67675283768ffd062cf3cf16edb49f5d4
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\en_US\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 102b586b197ea7d6edfeb874b97f95b05d229ea6a92780ea8544c4ff1e6bc5b1
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\es\messages.json
                                                                                                                                            • Size 961B
                                                                                                                                            • SHA256 2008f4faab71ab8c76a5d8811ad40102c380b6b929ce0bce9c378a7cadfc05eb
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\es_419\messages.json
                                                                                                                                            • Size 959B
                                                                                                                                            • SHA256 90a560ff82605db7eda26c90331650ff9e42c0b596cedb79b23598dec1b4988f
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\et\messages.json
                                                                                                                                            • Size 968B
                                                                                                                                            • SHA256 cc31b877238da6c1d51d9a6155fde565727a1956572f466c387b7e41c4923a29
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\eu\messages.json
                                                                                                                                            • Size 838B
                                                                                                                                            • SHA256 a41670d52423ba69c7a65e7e153e7b9994e8dd0370c584bda0714bd61c49c578
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\fa\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 7c4c09d19ac4da30cc0f7f521825f44c4dfbc19482a127fbfb2b74b3468f48f1
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\fi\messages.json
                                                                                                                                            • Size 911B
                                                                                                                                            • SHA256 2d752a5dbe80e34ea9a18c958b4c754f3bc10d63279484e4df5880b8fd1894d2
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\fil\messages.json
                                                                                                                                            • Size 939B
                                                                                                                                            • SHA256 f51eeb7aaf5f2103c1043d520e5a4de0fa75e4dc375e23a2c2c4afd4d9293a72
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\fr\messages.json
                                                                                                                                            • Size 977B
                                                                                                                                            • SHA256 0518287950a8b010ffc8d52554eb82e5d93b6c3571823b7ceca898906c11abcc
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\fr_CA\messages.json
                                                                                                                                            • Size 972B
                                                                                                                                            • SHA256 4caa46656ecc46a420aa98d3307731e84f5ac1a89111d2e808a228c436d83834
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\gl\messages.json
                                                                                                                                            • Size 990B
                                                                                                                                            • SHA256 0cf098dfe5bbb46fc0132b3cf0c54b06b4d2c8390d847ee2a65d20f9b7480f4c
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\gu\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 fe8218df25db54e633927c4a1640b1a41b8e6cb3360fa386b5382f833b0b237c
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\hi\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 d2d1afa224cda388ff1dc8fac24cda228d7ce09de5d375947d7207fa4a6c4f8d
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\hr\messages.json
                                                                                                                                            • Size 935B
                                                                                                                                            • SHA256 73e6e246ceeab9875625cd4889fbf931f93b7b9deaa11288ae1a0f8a6e311e76
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\hu\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 958c0f664fca20855fa84293566b2ddb7f297185619143457d6479e6ac81d240
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\hy\messages.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 0b16e3f8bd904a767284345ae86a0a9927c47afe89e05ea2b13ad80009bdf9e4
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\id\messages.json
                                                                                                                                            • Size 858B
                                                                                                                                            • SHA256 e3c86ddd2efebe88eed8484765a9868202546149753e03a61eb7c28fd62cfca1
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\is\messages.json
                                                                                                                                            • Size 954B
                                                                                                                                            • SHA256 943e61988c859bb088f548889f0449885525dd660626a89ba67b2c94cfbfbb1b
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\it\messages.json
                                                                                                                                            • Size 899B
                                                                                                                                            • SHA256 f41862665b13c0b4c4f562ef1743684cce29d4bcf7fe3ea494208df253e33885
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\iw\messages.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 bbb81c32f482ba3216c9b1189c70cef39ca8c2181af3538ffa07b4c6ad52f06a
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ja\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 34ac08f3c4f2d42962a3395508818b48ca323d22f498738cc9f09e78cb197d73
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ka\messages.json
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 30898bbf51bdd58db397ff780f061e33431a38ef5cfc288b5177ecf76b399f26
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\kk\messages.json
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 548dc6c96e31a16ce355dc55c64833b08ef3fba8bf33149031b4a685959e3af4
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\km\messages.json
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 a6118f0a0de329e07c01f53cd6fb4fed43e54c5f53db4cd1c7f5b2b4d9fb10e6
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\kn\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 30078ef35a76e02a400f03b3698708a0145d9b57241cc4009e010696895cf3a1
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ko\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 c52d9b955d229373725a6e713334bbb31ea72efa9b5cf4fbd76a566417b12cac
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\lo\messages.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 89082fb05229826bc222f5d22c158235f025f0e6df67ff135a18bd899e13bb8f
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\lt\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 5dfcbd4dfeaec3abe973a78277d3bd02cd77ae635d5c8cd1f816446c61808f59
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\lv\messages.json
                                                                                                                                            • Size 994B
                                                                                                                                            • SHA256 0621de9161748f45d53052ed8a430962139d7f19074c7ffe7223ecb06b0b87db
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\mk\messages.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 d0ae7739adea379b6390d1ee65699fc78d8649b7977503b062f34a52690a5744
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ml\messages.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 22ca9415e294d9c3ec3384b9d08cdaf5164af73b4e4c251559e09e529c843ea6
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\mn\messages.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 613d8751f6cc9d3fa319f4b7ea8b2bd3bed37fd077482ca825929dd7c12a69a8
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\mr\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 adeb082a9c754dfd5a9d47340a3ddcc19bf9c7efa6e629a2f1796305f1c9a66f
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ms\messages.json
                                                                                                                                            • Size 936B
                                                                                                                                            • SHA256 2824cf97513dc3ecc261f378bfd595ae95a5997e9d1c63f5731a58b1f8cd54f9
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\my\messages.json
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 243befbd6b67a21433dcc97dc1a728896d3a070dc20055eb04d644e1bb955fe7
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ne\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 729cf12e1ce062efc5eda3796ca6d7a29b1c52aabb0ac4889d6fa6aa88ad9526
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\nl\messages.json
                                                                                                                                            • Size 914B
                                                                                                                                            • SHA256 f3fe1ffcb182183b76e1b46c4463168c746a38e461fd25ca91ff2a40846f1d61
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\no\messages.json
                                                                                                                                            • Size 878B
                                                                                                                                            • SHA256 21ceff02b45a4bfd60d144879dfa9f427949a027dd49a3eb0e9e345bd0b7c9a8
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\or\messages.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 4fa7d3ed5b6003b4b0b3d1cedf0a7dd6489b96311b4bc320e8a3dd16852d59d9
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\pa\messages.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 bbd37d41b7de6f93948fa2437a7699d4c30a3c39e736179702f212cb36a3133c
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\pl\messages.json
                                                                                                                                            • Size 978B
                                                                                                                                            • SHA256 e00ff20437599a5c184ca0c79546cb6500171a95e5f24b9b5535e89a89d3ec3d
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\pt_BR\messages.json
                                                                                                                                            • Size 889B
                                                                                                                                            • SHA256 e1e271d195f102684616637aa6a899ca75817ebd557868ae0d6150a12bfa856b
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\pt_PT\messages.json
                                                                                                                                            • Size 914B
                                                                                                                                            • SHA256 e93b8e7fb86d2f7dfae57416bb1fb6ee0eea25629b972a5922940f0023c85f90
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ro\messages.json
                                                                                                                                            • Size 937B
                                                                                                                                            • SHA256 085787999d78fadff9600c9dc5e3ff4fb4eb9be06d6bb19df2eef8c284be7b20
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ru\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 c0a776448a258efd47065bf3f4b45260d1b4cb431d57ecc97995e122249081f6
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\si\messages.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 54241ebe651a8344235cc47afd274c080abaebc8c3a25afb95d8373b6a5670a2
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\sk\messages.json
                                                                                                                                            • Size 934B
                                                                                                                                            • SHA256 903060ec9e76040b46deb47bbb041d0b28a6816cb9b892d7342fc7dc6782f87c
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\sl\messages.json
                                                                                                                                            • Size 963B
                                                                                                                                            • SHA256 aab9cf9098294a46dc0f2fa468afff7ca7c323a1a0efa70c9db1e3a4da05d1d4
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\sq\messages.json
                                                                                                                                            • Size 950B
                                                                                                                                            • SHA256 8558d3adaec20033c83b2e5c4c8121f969f531ae779c15181e65a2f7954ebc6b
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\sr\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 4e8b69e864f57cddd4dc4e4faf2c28d496874d06016bc22e8d39e0cb69552769
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\sv\messages.json
                                                                                                                                            • Size 884B
                                                                                                                                            • SHA256 64b1e422b346ab77c5d1c77142685b3ff7661d498767d104b0c24cb36d0eb859
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\sw\messages.json
                                                                                                                                            • Size 980B
                                                                                                                                            • SHA256 0d20680b74af10ef8c754fcde259124a438dce3848305b0caf994d98e787d263
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ta\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 6282bf9df12ad453858b0b531c8999d5fd6251eb855234546a1b30858462231a
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\te\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 026c164bae27dbb36a564888a796aa3f188aad9e0c37176d48910395cf772cea
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\th\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 d147631b2334a25b8aa4519e4a30fb3a1a85b6a0396bc688c68dc124ec387d58
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\tr\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 b9066a162bee00fd50dc48c71b32b69dffa362a01f84b45698b017a624f46824
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\uk\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 9fa26ff09f6acde2457ed366c0c4124b6cac1435d0c4fd8a870a0c090417da19
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\ur\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 5da836224d0f3a96f1c5eb5063061aad837ca9fc6fed15d19c66da25cf56f8ac
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\uz\messages.json
                                                                                                                                            • Size 865B
                                                                                                                                            • SHA256 1eba3f2228c3e838a666f85ba3ee42c1d62c98a51287c5cf1de3fcd204c3bc4c
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\vi\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 597c5f32bc999746bc5c2ed1e5115c523b7eb1d33f81b042203e1c1df4bbcafe
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\zh_CN\messages.json
                                                                                                                                            • Size 873B
                                                                                                                                            • SHA256 c047235c983d3dcf835d4ecc1c9270c6262a09a5acadf093d87e709c0a23cae7
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\zh_HK\messages.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 30f44cfad052d73d86d12fa20cfc111563a3b2e4523b43f7d66d934ba8dace91
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\zh_TW\messages.json
                                                                                                                                            • Size 843B
                                                                                                                                            • SHA256 f94c6ddedf067642a1af18d629778ec65e02b6097a8532b7e794502747aeb008
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_locales\zu\messages.json
                                                                                                                                            • Size 912B
                                                                                                                                            • SHA256 ec78ddd4ccf32b5d76ec701a20167c3fbd146d79a505e4fb0421fc1e5cf4aa63
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            verified_contents.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 6e7f425854ad23b4a516ea6d49bc620ae0f800212eb55af7c385006f43f510a2
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            manifest.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\manifest.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 4375dfec1feb4295bdee57adb32a4cbaf351904be807160eabe87ca692b2b5b2
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            offscreendocument.html
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\offscreendocument.html
                                                                                                                                            • Size 97B
                                                                                                                                            • SHA256 b9fa2d52a4ffabb438b56184131b893b04655b01f336066415d4fe839efe64e7
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            offscreendocument_main.js
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\offscreendocument_main.js
                                                                                                                                            • Size 115KB
                                                                                                                                            • SHA256 f6b3a786b1178d0d853f37559c83a4b5e40e2af451dca20af583137416af8416
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            page_embed_script.js
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_1234681765\CRX_INSTALL\page_embed_script.js
                                                                                                                                            • Size 339B
                                                                                                                                            • SHA256 e9bdab7a401dd22885c7a7a8bb9c55f27783807a64402e62b39758c7fdccb345
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            verified_contents.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_2090124734\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            manifest.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4668_2090124734\CRX_INSTALL\manifest.json
                                                                                                                                            • Size 962B
                                                                                                                                            • SHA256 5694c91f7d165c6f25daf0825c18b373b0a81ea122c89da60438cd487455fd6a
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            HubApps
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                                            • Size 106KB
                                                                                                                                            • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Network Persistent State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                            • Size 12KB
                                                                                                                                            • SHA256 225827fcc2b4a1ff771c704946927168849a9228aee447266ad284e9ca70313d
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Network Persistent State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 a1f02fa73a9dbb4b6e46fdfb7f3c9d716ff8c29c1fde91bcc641ff335097b0c8
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Network Persistent State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                            • Size 111B
                                                                                                                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            SCT Auditing Pending Reports
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                            • Size 2B
                                                                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Preferences
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                            • Size 13KB
                                                                                                                                            • SHA256 b2603331020c2cc10adc0840a3a17fb440f698fc8229fc61717629f5a01a0988
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Preferences
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                            • Size 16KB
                                                                                                                                            • SHA256 ca74bcb3a1b7a1f69f26e5b524bffcadd2a9145a550589028088357cc1932a1a
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Preferences
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                            • Size 17KB
                                                                                                                                            • SHA256 0eaed65db330723a95beeb9260a33143213bdd5f6db0659b70a8894bd8379547
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Secure Preferences
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                            • Size 36KB
                                                                                                                                            • SHA256 278f485f8631d95797f37f99ae0a3a812ec3f056aa7ea2332a755dac32014e89
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            sync_diagnostic.log
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                            • Size 6KB
                                                                                                                                            • SHA256 30dda6ac82b4a3741d275277ae0a65b51964523bd9b2ac1d665540d29dccf138
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            CURRENT
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                                                                                            • Size 16B
                                                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            MANIFEST-000001
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                                                                            • Size 41B
                                                                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            a42484fe-e903-4793-ab0d-07587d6cc156.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a42484fe-e903-4793-ab0d-07587d6cc156.tmp
                                                                                                                                            • Size 70KB
                                                                                                                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            666800a5-c529-4cf6-9533-894e1866b1e1.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\666800a5-c529-4cf6-9533-894e1866b1e1.tmp
                                                                                                                                            • Size 22KB
                                                                                                                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            office_endpoints_list.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                            • Size 18KB
                                                                                                                                            • SHA256 f193207a837295625cd73b118c74008ceb6d9bfd852aae5c4470fd44f20972b6
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                            • Size 28KB
                                                                                                                                            • SHA256 00a1f0e9525c02125356d9dfb8e8268ef2e113d9f0d55675ca525596ed73c462
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                            • Size 29KB
                                                                                                                                            • SHA256 c5b96470514d078fe5bf5e9764e61f2638763e19813ec2ce37e95d3c63518e47
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                            • Size 8KB
                                                                                                                                            • SHA256 6bb1a22f1e6a4b85aab31e40ae80f614b313b1c6aa32191c29ddf92bea71d42b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                            • Size 18KB
                                                                                                                                            • SHA256 116686a51a0ab026bbb8e469f4b46936a338915e14a301ff72990c466b2ef9e1
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                            • Size 8KB
                                                                                                                                            • SHA256 4f404a8c48e0135ac24be3d51057070623591a030dd672ffb7d03edc788557c1
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            RevisitationBloomfilter
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                            • Size 392B
                                                                                                                                            • SHA256 d54dae0a6e45b55a6fee248a9bac531a3fee2242086fb9c613e5496a31ecd9ba
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            RevisitationBloomfilter
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                            • Size 392B
                                                                                                                                            • SHA256 576b2a23bed3e4ccd3c0d7e8737dfa2410fd706281545fdf9bdc0c5df0f75265
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            RevisitationBloomfilter~RFe58cfde.TMP
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58cfde.TMP
                                                                                                                                            • Size 392B
                                                                                                                                            • SHA256 d3d8150a0763c79a4e9351e8ac2f2d2de52e1f9ed1310d5625d3923066ab3de2
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            keys.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                                            • Size 8KB
                                                                                                                                            • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            nav_config.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            metadata.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                            • Size 132B
                                                                                                                                            • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            metadata.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                            • Size 732B
                                                                                                                                            • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            metadata.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                            • Size 612B
                                                                                                                                            • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            metadata.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                            • Size 252B
                                                                                                                                            • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            metadata.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                            • Size 372B
                                                                                                                                            • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            metadata.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                            • Size 492B
                                                                                                                                            • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            cc59282b-8d3b-4531-b1fd-85a6d520069f.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cc59282b-8d3b-4531-b1fd-85a6d520069f.tmp
                                                                                                                                            • Size 13B
                                                                                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            OperaGX_48425771.exe
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\OperaGX_48425771.exe
                                                                                                                                            • Size 3.9MB
                                                                                                                                            • SHA256 e3b3f63eaa96261c073fc3c3c00abad0658a47eca4026e95c326b54af8f7777c
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            custom_partner_content.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\resources\custom_partner_content.json
                                                                                                                                            • Size 245KB
                                                                                                                                            • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            assistant_installer.exe
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                                                                                            • Size 2.5MB
                                                                                                                                            • SHA256 39284ef1695bee19a8fa544f64215eb9fa49dc97b05bca3499d0a2781055929c
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            browser_assistant.exe
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                                                            • Size 5.2MB
                                                                                                                                            • SHA256 91455152ee199195352f4f42ef7000c08ac52b4b9149577b8cde0244b1c12c1b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            opera_autoupdate.exe
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                            • Size 7.0MB
                                                                                                                                            • SHA256 39b075bbfa7f2d50b6c012891f9fdbbf418f6ec6c6dc2ff7a14ca5873f0cfe96
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            opera.exe
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                            • Size 2.6MB
                                                                                                                                            • SHA256 3eb1a2f751e85be99426bad0cfa580ca19a608a7e121b2f1cb597f95a5347ea6
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Opera GX Browser.lnk
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\Opera GX Browser.lnk
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 31b5b5d930c287aa6a827c53cb38805ebf7d1254e256bde1c50aa7ad39f6c33c
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            additional_file0.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\additional_file0.tmp
                                                                                                                                            • Size 2.8MB
                                                                                                                                            • SHA256 1ef33f3f50727d57dda98c03db5f759fc66315965fda144dbcbe41e3d0720265
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            installer_prefs_include.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\installer_prefs_include.json
                                                                                                                                            • Size 357B
                                                                                                                                            • SHA256 ec8c0ad2341daf9fc9c18b82e4dfb6519b4656129308fcd6ba22894a5e7e2e52
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            installer_prefs_include.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\installer_prefs_include.json
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 a2f29124a23cbbbaa8a68f619adf77d9d984e04563183df25e03e5019cec1577
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            installer_prefs_include.json.backup
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba7e3b3d-aea8-4a9e-96cf-811300569839 Opera GX Installer Temp\opera_package_202604180451311\installer_prefs_include.json.backup
                                                                                                                                            • Size 342B
                                                                                                                                            • SHA256 95d3f482261e81e431d2e2722cb3f5aa9cc52c71321e3958d2cf01d6d282aafe
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            10f23514-0b62-492f-8bc6-22e3e7ba3dc3.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\10f23514-0b62-492f-8bc6-22e3e7ba3dc3.tmp
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            installer.exe
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\7zS4C4F4689\installer.exe
                                                                                                                                            • Size 9.0MB
                                                                                                                                            • SHA256 ffe37c5e6519b2992735665c5001c9364824b2148baeb6ac8799ca7f208ae00e
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ContentI3.exe
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe
                                                                                                                                            • Size 3.8MB
                                                                                                                                            • SHA256 ef2734657b11113a433abb7ebac962e2bf6bf685f05c5f672997f01875430168
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            d4f0b74b-d4c1-4336-b684-78a76ddb397a.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\d4f0b74b-d4c1-4336-b684-78a76ddb397a.tmp
                                                                                                                                            • Size 1B
                                                                                                                                            • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            content_new.js
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4668_129418015\CRX_INSTALL\content_new.js
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            82e49f56-2191-4f32-8aac-48c979dc4d76.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4668_1937929740\82e49f56-2191-4f32-8aac-48c979dc4d76.tmp
                                                                                                                                            • Size 147KB
                                                                                                                                            • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            messages.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4668_1937929740\CRX_INSTALL\_locales\en_CA\messages.json
                                                                                                                                            • Size 851B
                                                                                                                                            • SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            dasherSettingSchema.json
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4668_1937929740\CRX_INSTALL\dasherSettingSchema.json
                                                                                                                                            • Size 854B
                                                                                                                                            • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            service_worker_bin_prod.js
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4668_1937929740\CRX_INSTALL\service_worker_bin_prod.js
                                                                                                                                            • Size 121KB
                                                                                                                                            • SHA256 ed3803ef5bac39e8b153d283695ee3562398e5d771a6c7fe5d1a85805672ab3e
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            file.txt
                                                                                                                                            • Path C:\Users\Admin\AppData\Local\file.txt
                                                                                                                                            • Size 58B
                                                                                                                                            • SHA256 cb987dfb866f413b61bffa86785587954401e763aed7f31d7a32d8e6d1bd5014
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Opera GX Browser.lnk
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 dec664bd0ac551902450188a4ca80dd206d5f26e7a959a6aabff66c5fba65aa9
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ccba5a5986c77e43.customDestinations-ms
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 39e94d49047a5c6ec1af86d6137c4f580f7ccabd90795dd56cfdf9bd5921cae2
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            settings.dat
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                                            • Size 40B
                                                                                                                                            • SHA256 1563d6dcae082bd636591a54f642ede4e84075de5e5b0f82e35a7c4aafc9a6b3
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            350a9144-026f-4647-887c-b099795d57fa.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\350a9144-026f-4647-887c-b099795d57fa.tmp
                                                                                                                                            • Size 162KB
                                                                                                                                            • SHA256 655050396cfac8e23abeed21171996030b98d079090918ccf869830caa20cf6b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            the-real-index
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                            • Size 48B
                                                                                                                                            • SHA256 f4910122a84fec969d93d4bf5a51ab5fede1e7f7cd94396345ebeda295d55e41
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            the-real-index
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                            • Size 432B
                                                                                                                                            • SHA256 eee224c3a05a07f36f5cecf1cff6e85ed0c458ea26933d7cf67c903e0cb8034b
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            index
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\index
                                                                                                                                            • Size 256KB
                                                                                                                                            • SHA256 fc62c23c1719ab9d6d6651ffa5d9f01b01500bbcf822c5bb765f22c17f54909d
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            the-real-index
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                            • Size 48B
                                                                                                                                            • SHA256 48d9aa85ee23bed522f196a2ace32134cff26b60bde5ad76dadacd0c5f7ba566
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            the-real-index~RFe5a6da0.TMP
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a6da0.TMP
                                                                                                                                            • Size 48B
                                                                                                                                            • SHA256 c17abd98b3fec0148ecfe90576524ec053daa9ef7cd255c49ae0364a4147624f
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 80b53468fe2fa0c5d1fc679437e6ef5903586665cb089fceb774775cf0b37300
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 792f82a5415715b3301f8e67ed9efcd97ca1948623565a1dea6f83e9136180d8
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 97c1e67f61f14af22ad32ca68e65b62aa67a161b9a4518935c5b765e07c07d20
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 c0b05d49b4be119892839f7540fd78c6558adbdca7466611a2f77513121b99d8
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 ff9248f3c8071fdba7ea66f83617cfa7f214bc5fecc9b4bdd10b837449c1d3a8
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 53c7f7f08c3385055364a3c13b3f7e60f9561a105bb0daeea8b106bcca3b915f
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 b070738f72325017ada94ac15bfa9676fdbc07726af2d8c23a0c9ef1b7f93580
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 74137a55dca2c284203cd7d5596a877c896ee48b2117fc9d5794e71bddb87b50
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 63a38b666a700fd5e543b62e9efcebeeb536e2504b5b68935ee6c82efb25ae58
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 df016e5928dd56856090700f0380d4929863cc938e6644d7e2a5b177a3bfddf4
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 c498bd0aea836c75cbc689fe15d1d0768817f0e57336009eefd96bcda4a96405
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 d9d96aea118987c4a824b850a127b09dab411c33defe893b08c7ece8a3f9e5d9
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 978ab674aa75e8d1369d6684d5b8980616a68730baa5e376c93829f46050b3f2
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 6758410890e0f12f644b93e0ea647b833c1e3b00d9e8537824d962536d515205
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 7f461ddc15ab44a13d907bc0c17e4a79873db31c08746cf20903206c89182788
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 605edc373fa849829969b4f990d333ab6a73d75ad66f481dd4dfa55dec79eadb
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 92106ac57a04349ae5e400dc83637b726a3f4cdcd45b15ba373f58202acc6c43
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 9357c3ec400890949f4e04c48a140fa06ce0eab61f4cc7f6c30eeff1e84fad77
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 4e602b02663116c8a4dc3a3d0b77dad7ae56b5b6b9e8ad844785e50737914f93
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 6028edd2ceb144f544938dd638391cd0216de81debc8d00c70eea963939d63a3
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 9195b8e4563e90e658f95700361b856e29c3317b7eedb4b33dcdb41607394f08
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 6e829751f546878392ca853617815cc5ad0916d4855fa11e7943c7767593ff99
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 135071b6a9e28c692c76e696752b833e6430b3f12636162b8e77b3681b5186f7
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 9725173f81938f46b7af5704d19691a67ecdf6b3c4f36fae143b5a3318ff5e17
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 d31d419138db2830c3cedc6ef925c9705382ed2a5db499afe90aa4ae8a81d934
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 58ce8325edc94a621c4f1e17049821b833ed6ed0511ddd71134d7592182de4b1
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 8e363f588a0272df110a5cc0171d9889eb77017519593658d601b3661e35b1b7
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 541B
                                                                                                                                            • SHA256 98ccd672a2bcd220317ee1252cd8e50bf03346b0e80d6d8880f39593cfcd4223
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 df5eea4b8b5ddeaf10ca23535a3c6b10a764ee014600e8b1baf132f3136946be
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 48ae26fe078bf5cd87b8882caba643de51b7bd89b9257264d35b02c717dd835c
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 e19b1f81f933b529ae1bb3d89a340fc2834ef3713e82c055c97d04ee0255335b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 5cff20e5514571c40c6aa0e92740ee76f59fac1ff3a4f7e1cc3e2fb84446f297
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 c1b2ffe843aa3262dcb36e9f68a20c2fbb70a18538bb0bc72483235b811c8ca5
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 701B
                                                                                                                                            • SHA256 593e959940a988d1d2842ecc03e52930e31af2b7c470855dd9acdf9d6d913ac2
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 829B
                                                                                                                                            • SHA256 6bb50875225ec536bed0c86cad63cc972e53edef465e2a0e74e6d2cf8daf8695
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 973B
                                                                                                                                            • SHA256 d66d5837b3b3568dd8a120e5fa41c2a327d6a94ccf182414b681fb38230ed6aa
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 55562b66a3c318b828db30fe5772f5526f1e2492f8294d6da7180d5b67776f28
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 139a7dc3acecff1e4b67df96abe810aa46891a6187718cb0c4ffc1b238f12bd3
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 f166b1f6daee770caae94360bb764ff5a321e9c508eabf1102779766b489122c
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 42bedee4ebb22bc7df098104815a9156ae86d3fc336446f905775322092a9f52
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 0dbec84af308bd343703096d1f60f2b126caa05afa96c885618e8313b94698b0
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 bd991683ffd5460c06dbd5627c148a32a0206e788376808e01815bef092ed07e
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 e0d749d7ed99a31d1fa16150b406d0a1218f0c01258d6f6b47d13a61e72da7b9
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 9f35b92a829f78033da2543db4b4e7a6098c82131cf78e3eb3ba2d58bf57069c
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 4e5deefc74614e00e59598255666a8e509d50081f9cb309da3f549c142dde866
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 4e29ca35d7d1abf84034fb8aa01766f3a1bec6367899a040259205bddfe7de4a
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 4a2cf620795132bab815b4fb3971880814a42821b3b2abb348b1188e05f01628
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 04598fb89d22dc206c74a8fc9a5b8eda319f0bab32663ea08aca7e9c0e334daa
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 1e7bf0be06174cfedd61c54e2b74ba689fa5d2d5127173b19e07989229d76930
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 941ad6187c73e71eecfd6ed7e8d8ac978f2044d5939bb220d85cd65bd4206455
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 66b97f6f0ba2ee0149d353de0226e5069ca8c3eae7424580cbaa5ffad69f1f12
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 301a89cc7bbb27a74c8ae799a94717a46454d47510856785520f6c7bccb90a77
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 618ba53d38936245150d714cfaa2d714c19951ecd959e4b77f7a304120efa44b
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 a2cc747fbc1fee9dce461130c2ddad8c01e016287d2bf151f148270a86d2c7d7
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 320fda3582edb091871af0fd8d6fb86876b3c30e3f78e9eab1b89e6594eb2ed0
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 64a927fdcb341d6afa9de88aacc8b4b1efef53f678d9379492d0de85ab655b30
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 c6b9f52243badedb882f484c0ac2f79e630d752f490139159aabd3276edcb8b2
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 b0168fdac77aa6e876b0bcf5d3d03f7cc9b4e9c39459f99020f9a9013f111996
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 f76f1d05dd1f2adf895a7fe01a708c2cd14515eecf1ad6d484598f5df07c62a7
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 8KB
                                                                                                                                            • SHA256 65e8b77fc2d8e48e9e3712e77418a169f27c12cea7a0a71dd28be09f36105a70
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 5ed72fac010bd5d83d209010fabe1ca0d1058e226b9bf99cf47b9e29e3523544
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 8KB
                                                                                                                                            • SHA256 9fa245c189f1efdeb713727d22dada5483b587ed01e7bd0858cb618f5b69177c
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 9KB
                                                                                                                                            • SHA256 3bb5088d40450e3129862f2e8286134f202160546124f5cb43a58b9dcc14ef09
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 d7ef703617b88eafae3f1bf5dbc076101523ec320854d3e349d7e6fecdd17dad
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 cf746af3de23a0390286386acba534937475dabe020435e9769da26c9ed7da89
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 8KB
                                                                                                                                            • SHA256 fae35c8b94f7e7d96ddd7c7b6ea44844ddd96bb4276cac0d7d70c479e839162b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 8KB
                                                                                                                                            • SHA256 8621cab8bf772d73fa87727e58b443887543b8af368e1eeb5780eb17be1951cb
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 a2f866cc026e1c80398103741b8f4d96d1dd7af448c8a2e46528c56a8fbac10d
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 95918c312f30b3816eb7e12d0d7e35c5aba76802d83fda881d8f24f0c279b717
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 ad7cdc59fb07167d8c7227f30c1bcc8743abd43783576acc795076c8c170d04a
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 9d738d0db2920eb44b0b03549baf24b2a97463684ba5993d656af82b19074395
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 f4b8fdd38340c9ddc5c906bf9a285e5f710e725b7a32e7fcdc6339b95945bf3f
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 10KB
                                                                                                                                            • SHA256 09a4b269795d358d4b3ae499a53c52de4437e4cd27996b9a878efa0cb672e35a
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 082525aca7eed0e85c3890202cf73bdf52f43ba969b3781b5e842f277a4561d3
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw
                                                                                                                                            • Size 11KB
                                                                                                                                            • SHA256 57e3d8da4c7e50600b5c55600ddf4195d1fba5390b83e1bd06d8cdd619bbac5c
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw~RFe5a5d25.TMP
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_03273c0b-5d33-4a5a-b2b7-c22dcd5c7583.raw~RFe5a5d25.TMP
                                                                                                                                            • Size 429B
                                                                                                                                            • SHA256 d268d71ebb362d6205a92b75199df76715b909fc98eae56bd26dc938bee08b48
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            b2a68762-c641-49b0-afb4-1bc9959d12c6.tmp
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\b2a68762-c641-49b0-afb4-1bc9959d12c6.tmp
                                                                                                                                            • Size 15KB
                                                                                                                                            • SHA256 787a560d83763835e55c2f515afd1cae2e8ab2351ff7840e7bd2a9f4632ee23e
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 77e45a432403b89555f63452ee555609ba27ac0a6d7aee5933fcfcdbb94d3c15
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 979B
                                                                                                                                            • SHA256 c595eb9dd2183383be7c77ae8efe6defdcb5b1376f09823465c67d5313bf40ed
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 99ff794f278cf091eec688a47f1f41844524a3c7157c738146fa7bfbc628df48
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 6fe85d80909f9f86d13efd425c3286c066c5a858ab198d0ac4492a593b52c7cf
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 0f6d2e1639bdd433e8f02237581659e16955591b914a3d7ac7d1cf6c057359f2
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 10a55e52128e135f8acf9780d49f25b945ee292d3764c7095ebb66d5b38ff5b3
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 599B
                                                                                                                                            • SHA256 e8ab1409a0e8010edfaf609adcc90f1b8ffaf55dfedf0a055e140cd2278735aa
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 692B
                                                                                                                                            • SHA256 7ee40c89bd9756133c7468a45c8181253779f12501050981f01a48e6a77fcde0
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 781B
                                                                                                                                            • SHA256 367a89ea62429dc7c446b41ff718b78b6639662bdff2fb4803e7f30ac1351ee7
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 878B
                                                                                                                                            • SHA256 b45cd26241dc7f28b14eca53b8785488fdf55929da288a3e150ebe9a50af2b93
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 74a94ee6e59cc2073788437076f71bb25c25503aba3ffa2efb558c6d061db2c9
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 6a9f1bd2590b48f1b832f1e95c755f2e7415fb88ea088c2e361177522648df47
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 915d34a4bee3d10c040b812b3542b515e24904d6c0fc25be69bc0b83ad8bf1d9
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 6295312c9a800e8052ae729bc446ad0ade2c9c112af7ca55f5025ac1e4758380
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 f2e0252c1bd7457eb9c11cd8874f5b94a5dcbe4e2ae1a2c665dc555f681236b5
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 507B
                                                                                                                                            • SHA256 1d42e039178745cd2fbbe38995cfc364661d58cf2e3d7a56acadc8417f620e36
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 09804229c99d1d7b679f8525ae2d92d9112a6b44c0ffe7143608726e16855a47
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 a01d031aef21edd0f6d12b294358e571c55a3213b0412007a7039864601bae51
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 a556606207c373716740cf02176a8500cee672f4474912dd00095f576e53788e
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 e5f96fb15a8bd56efa255966047b9d7e112b0f6351638d020902c56b1b16eccc
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 852340b1545eca7515836e5b50f321aea2213512648d9a178b4d7e713df5295f
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 9fed4678f580983beed9d0b44290071d92b95cdb4cb0b90c7508c4dff9336789
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 ed7aecd911722029e42fbc44a99f6cba8ff5bda328b4225fb7d7cf616d464d57
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.0.1612572693~RFe5a64a7.TMP
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.0.1612572693~RFe5a64a7.TMP
                                                                                                                                            • Size 414B
                                                                                                                                            • SHA256 288448904e0ea01e696b01b82c225430a36a6548bcb4ee0d9351cf06b8bd93d1
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 261B
                                                                                                                                            • SHA256 b229759fe9446f37f96d447802ad1afd52195054b6b894f5fac3e47938a247ad
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 421B
                                                                                                                                            • SHA256 be61eada734da3929c5e6724241e5965bef554c45d48fce667411c12b4d64606
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 ebc5882551cb9e66e23a3fb842832555aab16846d5d657cf503df6960332f458
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 359B
                                                                                                                                            • SHA256 663aa45284b77e50c1d66acf36f616be92970e4f2b7773094ca591ca5d1257e0
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 47d42e68b484e2a9cf4e58ff07a82fc7e580faa304deee1ca1bc098f1449230e
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 3cff622226e344b457f0522ee3dabe31c185f5e1bb2555a61fbe6cf7957461c9
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 97265f134bbd02bac50857486f6f54f375cbb901694ce2648793a9381083ab7b
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 200B
                                                                                                                                            • SHA256 bd16e4b64c5ff35bae10d57e1a81802e408406e1cdfbb2713f966ff575c798cc
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 2928bc9a4b88baffb5591da056c5c1811f4a7a8b3dbaad36c4216eb0878b3ea7
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 cc61d39a242ce7020da0cfb61d7a38b07a6fcb0015b237025658680e25cf4223
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 d0087e704fbab8dec6981b879920ae70d6ed5584e28b75cd1ffd1f13c8da061f
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 ffffeff94d022721b1dc5945c044794538d24fe690ba912f61539435ae866bf8
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 e6b26f32f4ab0a56e62ddfbf6e4c49b982cd7783bc45441a0b8593740ea862c5
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.1.1513796211~RFe5a688f.TMP
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.1.1513796211~RFe5a688f.TMP
                                                                                                                                            • Size 171B
                                                                                                                                            • SHA256 87f5c68bf17a753e3653765b801c175ea3fab8e6ae4efb3dd8412a597a332790
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.2.968016832
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.2.968016832
                                                                                                                                            • Size 217B
                                                                                                                                            • SHA256 6c44736055f27f81c5f08a0c30ba025fff19def960731669bcdaf706aae31ae5
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ssdfp5448.2.968016832~RFe5a6da0.TMP
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5448.2.968016832~RFe5a6da0.TMP
                                                                                                                                            • Size 173B
                                                                                                                                            • SHA256 c9e6fc1ab4a5d59e77bcb85843ee4389c9d8d472c0cad3636878d46ea8a2d793
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            data_0
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                                                                                            • Size 8KB
                                                                                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            data_1
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                                                                                                                                            • Size 264KB
                                                                                                                                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            data_2
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                                                                                            • Size 8KB
                                                                                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            data_3
                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                                                                                            • Size 8KB
                                                                                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                            Submit Download

                                                                                                                                            ByteBreaker V1_48425771.exe
                                                                                                                                            • Path C:\Users\Admin\Downloads\ByteBreaker V1_48425771.exe
                                                                                                                                            • Size 583KB
                                                                                                                                            • SHA256 ddbd930cf742882ea6cc10ea5495f8aec24003664b81257c1b3900f3627b6684
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ByteBreaker V1_48425771.exe:Zone.Identifier
                                                                                                                                            • Path C:\Users\Admin\Downloads\ByteBreaker V1_48425771.exe:Zone.Identifier
                                                                                                                                            • Size 208B
                                                                                                                                            • SHA256 0eab0185b162729517043a946ae900dcf122406f5230ed8cfd53fbd97153419b
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            OperaGXSetup.exe.crdownload
                                                                                                                                            • Path C:\Users\Admin\Downloads\OperaGXSetup.exe.crdownload
                                                                                                                                            • Size 3.9MB
                                                                                                                                            • SHA256 daab3378104f03c7eab2999971ecb42bbb4711720471fa18c060c635b8e2720b
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            OperaGXSetup.exe:Zone.Identifier
                                                                                                                                            • Path C:\Users\Admin\Downloads\OperaGXSetup.exe:Zone.Identifier
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 5a1562cbf1e3c185e651ea6d22f1b0f129fc9d563686b7bd54bcabf012b18dd5
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            1mfea55a.newcfg
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\1mfea55a.newcfg
                                                                                                                                            • Size 257B
                                                                                                                                            • SHA256 d39e2cedf62c0ad276b35f98d39ce4f56bbebffa00cd8d32754bff8735e06b31
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            settings.dat
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Crashpad\settings.dat
                                                                                                                                            • Size 280B
                                                                                                                                            • SHA256 fef9e88eb962a5d2c63ffdcf5e069e3ad75c36a062d651760006c4a3f5b60e87
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            index
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Default\Code Cache\wasm\index
                                                                                                                                            • Size 24B
                                                                                                                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            Network Persistent State
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Default\Network\Network Persistent State
                                                                                                                                            • Size 229B
                                                                                                                                            • SHA256 153938ecc186cd98a2f1ebd1f53ae88cfe9d9884bd470e9166a53348a071fb2b
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Network Persistent State~RFe5c5859.TMP
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Default\Network\Network Persistent State~RFe5c5859.TMP
                                                                                                                                            • Size 59B
                                                                                                                                            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Preferences
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Default\Preferences
                                                                                                                                            • Size 6KB
                                                                                                                                            • SHA256 de42dd3500daa534729bc3fd3b88a525e02926b7b22a9300b8c234b966f677f0
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Preferences~RFe5c582a.TMP
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Default\Preferences~RFe5c582a.TMP
                                                                                                                                            • Size 6KB
                                                                                                                                            • SHA256 5a6ad3ba5a9dec0ec3086bb97d72aab4078b72af198283edee8999246d043f87
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Local State
                                                                                                                                            • Size 15KB
                                                                                                                                            • SHA256 d9d4c59b93a97f9e29622b60721a62d96c67f6bf7ca541159ad140063d9aaa55
                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Local State
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 ef53ce334144e61302f84bd76768d24ac89abd178e05484d9789efd9e9ec6a48
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Local State
                                                                                                                                            • Size 2KB
                                                                                                                                            • SHA256 1db9fad5b451e96fa8a95f5ccf24c84d27f2cf17deb8f7c24c440d2d3cb81fe0
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Local State
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Local State
                                                                                                                                            • Size 3KB
                                                                                                                                            • SHA256 e6d4ee20befb48ed28ad4b06667b7564df6f6b4d47bb784af989e6a209fe6242
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            Local State~RFe5bcbf7.TMP
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.WebView2\EBWebView\Local State~RFe5bcbf7.TMP
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 18429ddd7e132f365f89f5c3a81c3120211a729554fa142d497a9908d753763e
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            ByteBreaker.exe.config
                                                                                                                                            • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreaker.cc\ByteBreaker.exe.config
                                                                                                                                            • Size 256B
                                                                                                                                            • SHA256 fabb5fa9108be7069b8822156b6dcead2c60cb5b154e28dc66850871468b1461
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            manifest.json
                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4668_1080113618\manifest.json
                                                                                                                                            • Size 85B
                                                                                                                                            • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            manifest.json
                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4668_1301353056\manifest.json
                                                                                                                                            • Size 135B
                                                                                                                                            • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            LICENSE
                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4668_1876616662\LICENSE
                                                                                                                                            • Size 1KB
                                                                                                                                            • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            manifest.json
                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4668_1876616662\manifest.json
                                                                                                                                            • Size 79B
                                                                                                                                            • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            manifest.json
                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4668_400282791\manifest.json
                                                                                                                                            • Size 43B
                                                                                                                                            • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                            Submit Download

                                                                                                                                            manifest.json
                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4668_473507886\manifest.json
                                                                                                                                            • Size 160B
                                                                                                                                            • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            manifest.json
                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4668_500278227\manifest.json
                                                                                                                                            • Size 135B
                                                                                                                                            • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            manifest.json
                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4668_57189248\manifest.json
                                                                                                                                            • Size 160B
                                                                                                                                            • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                            Submit Download

                                                                                                                                            memory/2172-3340-0x0000000000B00000-0x0000000000BDF000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/2628-1799-0x00007FFBC0640000-0x00007FFBC0641000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/2628-1800-0x00007FFBBF010000-0x00007FFBBF011000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/3348-3660-0x00007FFBBF130000-0x00007FFBBF131000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/3348-3920-0x00000263E78D0000-0x00000263E7C48000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/3720-2260-0x00000000015C0000-0x000000000169F000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/3876-3441-0x0000000000C00000-0x0000000000CDF000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/3876-1425-0x0000000000C00000-0x0000000000CDF000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/4900-1750-0x00000000012B0000-0x000000000138F000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/4960-1414-0x0000000000C20000-0x0000000000CFF000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5220-1388-0x0000000001970000-0x0000000001A4F000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5220-1310-0x0000000001970000-0x0000000001A4F000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5316-3317-0x0000000000E40000-0x0000000000F1F000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5316-1401-0x0000000000E40000-0x0000000000F1F000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5684-3318-0x0000000000EF0000-0x0000000000FCF000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5752-1753-0x0000000001500000-0x00000000015DF000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5796-1510-0x00000000015A0000-0x000000000167F000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5932-3321-0x0000000003F90000-0x0000000003FB2000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5932-3322-0x0000000003FC0000-0x0000000003FE0000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5932-3320-0x0000000000B20000-0x0000000000BFF000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/5988-1514-0x0000000001800000-0x00000000018DF000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/6000-3319-0x0000000001760000-0x000000000183F000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/6380-3555-0x00007FFBBF130000-0x00007FFBBF131000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/6380-3998-0x0000021FCE900000-0x0000021FCEC78000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3515-0x0000000003AD0000-0x0000000003AE8000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3514-0x0000000003AB0000-0x0000000003ACA000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3518-0x000000001EA20000-0x000000001EA2E000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3517-0x00000000225D0000-0x0000000022608000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3516-0x000000001EA00000-0x000000001EA08000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3526-0x0000000022A70000-0x0000000022B24000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3925-0x0000000005350000-0x0000000005362000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3519-0x00000000229D0000-0x0000000022A68000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3513-0x000000001E850000-0x000000001E8FC000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3512-0x0000000000400000-0x00000000012E4000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3940-0x0000000000400000-0x00000000012E4000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3511-0x0000000000400000-0x00000000012E4000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3483-0x0000000000400000-0x00000000012E4000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3529-0x0000000022830000-0x0000000022852000-memory.dmp
                                                                                                                                            Download

                                                                                                                                            memory/8840-3680-0x0000000000400000-0x00000000012E4000-memory.dmp
                                                                                                                                            Download