Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://unlockfileno...

windows10-2004-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    268s
  • max time network
    235s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    19/04/2026, 21:04

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://unlockfilenow.com/JXNjsy291OskMZJxnYYsax?a=0&u=152869&t=Madium%20Discord&tracker=6394874757660065390&m=85&f=85&source=1214928
  • Sample260419-zwr5naft21
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 4 IoCs
  • Checks computer location settings 2 TTPs 20 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 18 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 57 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 42 IoCs
  • Suspicious use of AdjustPrivilegeToken 44 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://unlockfilenow.com/JXNjsy291OskMZJxnYYsax?a=0&u=152869&t=Madium%20Discord&tracker=6394874757660065390&m=85&f=85&source=1214928
    1⤵
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2800
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbbd9fc188,0x7ffbbd9fc194,0x7ffbbd9fc1a0
      2⤵
        PID:4292
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,15581195902588842514,17469815980090421834,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:3316
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,3177158181280801567,17750965134541922510,262144 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
        2⤵
          PID:1220
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,11351047729761673290,12432831174444954168,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
          2⤵
            PID:3016
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3520,i,12634581558485523420,8680223063852298377,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
            2⤵
              PID:3836
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3540,i,10347664213414216179,9459217186599185512,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
              2⤵
                PID:2296
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,12283262721099745973,1274064788484598921,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:1
                2⤵
                  PID:1180
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,1751972704128010350,10114697274889549985,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:2
                  2⤵
                    PID:1608
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,255247574684254991,11614435429053684048,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
                    2⤵
                      PID:3260
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,6655857167559842951,6336207703928598243,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
                      2⤵
                        PID:740
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,6662899078290891491,13819476706368664253,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
                        2⤵
                          PID:2832
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3496,i,18078398360467503317,14603136802920739889,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
                          2⤵
                            PID:2820
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,5063359700975663449,12434321127376065221,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
                            2⤵
                              PID:2784
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,5063359700975663449,12434321127376065221,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
                              2⤵
                                PID:4768
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,7745977716944924655,8241282457728509037,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
                                2⤵
                                  PID:5112
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,8317467388580304009,12319161112381020323,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
                                  2⤵
                                    PID:2064
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,7085468804468144288,14622827393833303026,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
                                    2⤵
                                      PID:2908
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,1186874437639305921,14780254269805557162,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
                                      2⤵
                                        PID:3292
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,18315391969187930958,4706560362020863181,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
                                        2⤵
                                          PID:4812
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6560,i,10526901353444045154,9737387983872283282,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:1
                                          2⤵
                                            PID:2600
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,8180903886533777093,3320304669022049588,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:8
                                            2⤵
                                              PID:1748
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6744,i,2094924311372216742,2976095385610420686,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:1
                                              2⤵
                                                PID:4952
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,1340157957438447254,5025960887535460656,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8
                                                2⤵
                                                  PID:2120
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,17808485626654685081,16344854195024652472,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:8
                                                  2⤵
                                                    PID:1444
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,10681139028964654733,498599765228040693,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:8
                                                    2⤵
                                                      PID:4184
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,16731582676617834930,8829209403522991845,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:8
                                                      2⤵
                                                        PID:5112
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4612,i,2761556224505837375,4826515029223157073,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
                                                        2⤵
                                                          PID:3132
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,3429891765693714191,18417443360663099249,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
                                                          2⤵
                                                            PID:4416
                                                          • C:\Users\Admin\Downloads\OperaGXSetup.exe
                                                            "C:\Users\Admin\Downloads\OperaGXSetup.exe"
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:4092
                                                            • C:\Users\Admin\AppData\Local\Temp\7zSCFF64FE9\installer.exe
                                                              C:\Users\Admin\AppData\Local\Temp\7zSCFF64FE9\installer.exe --server-tracking-blob=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
                                                              3⤵
                                                              • Downloads MZ/PE file
                                                              • Executes dropped EXE
                                                              • Enumerates connected drives
                                                              • Modifies system certificate store
                                                              • Suspicious use of SetWindowsHookEx
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:2648
                                                              • C:\Users\Admin\AppData\Local\Temp\7zSCFF64FE9\installer.exe
                                                                C:\Users\Admin\AppData\Local\Temp\7zSCFF64FE9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x290,0x294,0x298,0x270,0x29c,0x7ff74fd5e6d8,0x7ff74fd5e6e4,0x7ff74fd5e6f0
                                                                4⤵
                                                                • Executes dropped EXE
                                                                PID:1748
                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\installer.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\installer.exe" --version
                                                                4⤵
                                                                • Executes dropped EXE
                                                                PID:3836
                                                              • C:\Users\Admin\AppData\Local\Temp\7zSCFF64FE9\installer.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\7zSCFF64FE9\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=2648 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_20260419220557" --session-guid=2bc209a2-7736-4674-b3b6-e21bc37c8fa5 --server-tracking-blob=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 --desktopshortcut=1 --wait-for-package --initial-proc-handle=CC08000000000000
                                                                4⤵
                                                                • Executes dropped EXE
                                                                • Enumerates connected drives
                                                                • Enumerates system info in registry
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:2188
                                                                • C:\Users\Admin\AppData\Local\Temp\7zSCFF64FE9\installer.exe
                                                                  C:\Users\Admin\AppData\Local\Temp\7zSCFF64FE9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff74fd5e6d8,0x7ff74fd5e6e4,0x7ff74fd5e6f0
                                                                  5⤵
                                                                  • Executes dropped EXE
                                                                  PID:4724
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe" --backend --initial-pid=2648 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571" --session-guid=2bc209a2-7736-4674-b3b6-e21bc37c8fa5 --server-tracking-blob=ZWYzYmY5M2Y1Yjc5ZGEzMmZhMDI0NWFmNmNhNzEzMWRjZTBmMTQzYTI4ZTJiY2E4NmViYWVkZWI1YjIxOWQ5YTp7ImNvdW50cnkiOiJHQiIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yP3V0bV9zb3VyY2U9UFdOZ2FtZXMmdXRtX21lZGl1bT1wYSZ1dG1fY2FtcGFpZ249UFdOX0dCX1NWUl85NDgxX0REXzM2NTcmdXRtX2lkPTc0MzFlZTAxMDJmMzQ3OWZiZDBjZWYxYjVjODc1OWM1Iiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTAiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzc2NjMyNjgwLjU0MTIiLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTM5LjAuMC4wIFNhZmFyaS81MzcuMzYgRWRnLzEzOS4wLjAuMCIsInV0bSI6eyJjYW1wYWlnbiI6IlBXTl9HQl9TVlJfOTQ4MV9ERF8zNjU3IiwiaWQiOiI3NDMxZWUwMTAyZjM0NzlmYmQwY2VmMWI1Yzg3NTljNSIsIm1lZGl1bSI6InBhIiwic291cmNlIjoiUFdOZ2FtZXMifSwidXVpZCI6ImI3ZTVhNzI3LWExNjAtNDE1Yi04NzU2LTg0ODg1NWFjMmFiYiJ9 --desktopshortcut=1 --install-subfolder=130.0.5847.58
                                                                  5⤵
                                                                  • Executes dropped EXE
                                                                  • Enumerates connected drives
                                                                  • Enumerates system info in registry
                                                                  • Modifies registry class
                                                                  • Suspicious use of FindShellTrayWindow
                                                                  • Suspicious use of SendNotifyMessage
                                                                  • Suspicious use of SetWindowsHookEx
                                                                  PID:4908
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x288,0x28c,0x290,0x264,0x298,0x7ff6a0d3e6d8,0x7ff6a0d3e6e4,0x7ff6a0d3e6f0
                                                                    6⤵
                                                                    • Executes dropped EXE
                                                                    PID:3884
                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\assistant_installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                                                                    6⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Adds Run key to start application
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Enumerates system info in registry
                                                                    • Modifies Internet Explorer settings
                                                                    PID:4976
                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\assistant_installer.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0xfb4040,0xfb404c,0xfb4058
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:2360
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Enumerates system info in registry
                                                                      PID:3880
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x1084040,0x108404c,0x1084058
                                                                        8⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • System Location Discovery: System Language Discovery
                                                                        PID:116
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                                                        8⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • System Location Discovery: System Language Discovery
                                                                        • Enumerates system info in registry
                                                                        • Suspicious use of FindShellTrayWindow
                                                                        • Suspicious use of SendNotifyMessage
                                                                        PID:3228
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                          9⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • Enumerates system info in registry
                                                                          PID:3184
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x190,0x194,0x18c,0x15c,0x19c,0x7ffb954ec540,0x7ffb954ec550,0x7ffb954ec560
                                                                            10⤵
                                                                            • Executes dropped EXE
                                                                            PID:876
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                          9⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • Enumerates system info in registry
                                                                          PID:5224
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7ffb954ec540,0x7ffb954ec550,0x7ffb954ec560
                                                                            10⤵
                                                                            • Executes dropped EXE
                                                                            PID:5280
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x27c,0x280,0x284,0x238,0x288,0xc2d830,0xc2d83c,0xc2d848
                                                                          9⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • System Location Discovery: System Language Discovery
                                                                          PID:5356
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                            10⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Enumerates system info in registry
                                                                            PID:5372
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7ffb954ec540,0x7ffb954ec550,0x7ffb954ec560
                                                                              11⤵
                                                                              • Executes dropped EXE
                                                                              PID:5392
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                            10⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Enumerates system info in registry
                                                                            PID:5456
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7ffb954ec540,0x7ffb954ec550,0x7ffb954ec560
                                                                              11⤵
                                                                              • Executes dropped EXE
                                                                              PID:5508
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                            10⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Enumerates system info in registry
                                                                            PID:5580
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7ffb954ec540,0x7ffb954ec550,0x7ffb954ec560
                                                                              11⤵
                                                                              • Executes dropped EXE
                                                                              PID:5592
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Adds Run key to start application
                                                                    • Checks processor information in registry
                                                                    • Enumerates system info in registry
                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                    • Suspicious use of FindShellTrayWindow
                                                                    • Suspicious use of SendNotifyMessage
                                                                    PID:5192
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x168,0x164,0x198,0x160,0x19c,0x7ffb954ec540,0x7ffb954ec550,0x7ffb954ec560
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      PID:5212
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1784,i,10618753140956555492,13580426165157122855,262144 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1884 /prefetch:2
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Enumerates system info in registry
                                                                      PID:6036
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2152,i,15899395856449661813,11943470589515840679,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:3
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • System Time Discovery
                                                                      • Enumerates system info in registry
                                                                      PID:6056
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2364,i,4853335982182650563,17956989488360490174,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2440 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:5188
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3156,i,5097491436817966242,6558018431632544293,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3248 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:224
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3172,i,11606590592049228348,1528923003176280324,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3272 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Enumerates system info in registry
                                                                      PID:4736
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3184,i,6911320056140382325,6420203316937190328,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3292 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Enumerates system info in registry
                                                                      PID:2444
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3188,i,453338909254679075,12145862047717088145,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3312 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:3548
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3212,i,16408774809821791443,8219422846482689098,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3332 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:4412
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3228,i,11719404884711827796,2791890600873432245,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3352 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:2424
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4056,i,15320103083787711549,2610931093185276594,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4064 /prefetch:1
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Enumerates system info in registry
                                                                      PID:3052
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_gx_splash.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      PID:6416
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4600,i,629194101092820161,7722051033930398151,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4616 /prefetch:1
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Enumerates system info in registry
                                                                      PID:6672
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4796,i,9821916411399334550,8042226341760926902,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4812 /prefetch:2
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Enumerates system info in registry
                                                                      PID:6756
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4968,i,10272224750779991652,10252792377064747089,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4984 /prefetch:1
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Enumerates system info in registry
                                                                      PID:6816
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5192,i,4919512214707413368,4571030261595997033,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5196 /prefetch:1
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Enumerates system info in registry
                                                                      PID:6828
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5332,i,7232018825550065738,1680704873886626018,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5320 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Enumerates system info in registry
                                                                      PID:6856
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5336,i,4238392703994089802,14299262191824350640,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5368 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      PID:6864
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5340,i,1518624149433497883,10203027524913839329,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5404 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      PID:6876
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5344,i,16127206013782367301,16761640559229786757,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5468 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      PID:7060
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6032,i,3144747121544588287,6559809065737934695,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6036 /prefetch:1
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      • Enumerates system info in registry
                                                                      PID:6804
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6192,i,2378315218086028095,7944064475389546451,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6204 /prefetch:2
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      • Enumerates system info in registry
                                                                      PID:5576
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6728,i,14516627285801391209,11230024012182250043,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6744 /prefetch:2
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      PID:7160
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7088,i,9131358232549103401,7546612074399382069,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7080 /prefetch:2
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      • Enumerates system info in registry
                                                                      PID:6528
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6928,i,14622050812242198846,943698090164623402,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=5820 /prefetch:2
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Enumerates system info in registry
                                                                      PID:7348
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=7328,i,4457503150219260250,16474673626570036781,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=7480 /prefetch:1
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      PID:7388
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7264,i,13131511532356833546,4097655485476875084,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7600 /prefetch:1
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      • Enumerates system info in registry
                                                                      PID:7412
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6956,i,10274231907688724259,16902506411752456842,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7752 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Enumerates system info in registry
                                                                      PID:7044
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7996,i,14506354572757937953,15633754370918335708,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7300 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      PID:6584
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8096,i,15362208808424111757,673264417802790890,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8108 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Enumerates system info in registry
                                                                      PID:1732
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8252,i,8554658882612050816,3657600913769589031,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8264 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Enumerates system info in registry
                                                                      PID:5960
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8424,i,9868672137817890304,3596033509954654625,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8276 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Enumerates system info in registry
                                                                      PID:4612
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8560,i,17140115748019902507,3819026206207491531,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8580 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      PID:6356
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8600,i,2866878150182733214,17756726992352844813,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8632 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Enumerates system info in registry
                                                                      PID:6352
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7636,i,7948586654556250681,2909575305578037883,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8612 /prefetch:8
                                                                      7⤵
                                                                      • Executes dropped EXE
                                                                      • Enumerates system info in registry
                                                                      PID:6288
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9084,i,1973062767049009447,14321920333282682509,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9096 /prefetch:8
                                                                      7⤵
                                                                        PID:6484
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9200,i,4376126270392798326,1858006844481499096,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9224 /prefetch:8
                                                                        7⤵
                                                                        • Enumerates system info in registry
                                                                        PID:6452
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9232,i,2179093718626547249,9260512976153039913,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9264 /prefetch:8
                                                                        7⤵
                                                                        • Enumerates system info in registry
                                                                        PID:6476
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9768,i,7427889654464979488,11151708930861801479,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9812 /prefetch:2
                                                                        7⤵
                                                                        • Checks computer location settings
                                                                        • Enumerates system info in registry
                                                                        PID:8080
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9756,i,5003699951919477191,2753551240077816495,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9804 /prefetch:8
                                                                        7⤵
                                                                        • Enumerates system info in registry
                                                                        PID:6932
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                                        7⤵
                                                                        • Enumerates system info in registry
                                                                        PID:9188
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff79b6bd738,0x7ff79b6bd744,0x7ff79b6bd750
                                                                          8⤵
                                                                            PID:7396
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10360,i,8164808650531122075,7721609383032092851,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10372 /prefetch:8
                                                                          7⤵
                                                                            PID:6936
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10504,i,2414230934533374934,17190423775614892271,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9780 /prefetch:8
                                                                            7⤵
                                                                            • Enumerates system info in registry
                                                                            PID:7728
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10732,i,6218440797600328918,11715596628208187569,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10828 /prefetch:1
                                                                            7⤵
                                                                            • Checks computer location settings
                                                                            PID:8228
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3208,i,2705883400032395169,13200093098483535105,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=3324 /prefetch:8
                                                                            7⤵
                                                                              PID:6944
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe" --fix-taskbar-pins
                                                                              7⤵
                                                                                PID:8504
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff6a0d3e6d8,0x7ff6a0d3e6e4,0x7ff6a0d3e6f0
                                                                                  8⤵
                                                                                    PID:8540
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3800,i,9660539070235075332,3888864723393797834,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=3788 /prefetch:8
                                                                                  7⤵
                                                                                  • Enumerates system info in registry
                                                                                  PID:8548
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3360,i,14003466331099490603,4963481060223462183,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=3640 /prefetch:8
                                                                                  7⤵
                                                                                  • Enumerates system info in registry
                                                                                  PID:8588
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10568,i,4954071729886151645,12830701752665311842,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8452 /prefetch:8
                                                                                  7⤵
                                                                                    PID:8276
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8248,i,1626638871906157577,8587971288424159440,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=7004 /prefetch:8
                                                                                    7⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:8248
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6212,i,2835549550062202279,8047296639091960590,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10768 /prefetch:8
                                                                                    7⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:7224
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9372,i,17789972335178449824,11823502130115005160,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9344 /prefetch:8
                                                                                    7⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:8716
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=9532,i,6512796554781409803,15145049702868622027,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=8880 /prefetch:2
                                                                                    7⤵
                                                                                    • Checks computer location settings
                                                                                    PID:6456
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8424,i,7719529496023698235,13231621018813609210,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9116 /prefetch:8
                                                                                    7⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:5584
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9440,i,29813997565297288,16447055402963937940,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=9232 /prefetch:8
                                                                                    7⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:8676
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9520,i,2528177527740928149,10745555734674923082,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=4100 /prefetch:8
                                                                                    7⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:7984
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=8836,i,16799262187215006599,10971736517995198397,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=5660 /prefetch:2
                                                                                    7⤵
                                                                                    • Checks computer location settings
                                                                                    PID:2424
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8096,i,2961549402052205356,14950462643461617912,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8484 /prefetch:8
                                                                                    7⤵
                                                                                      PID:4340
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8236,i,13501702971832904972,8567101826603863914,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8360 /prefetch:8
                                                                                      7⤵
                                                                                        PID:8896
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=9224,i,3236886453208208477,9921251388685341869,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8808 /prefetch:2
                                                                                        7⤵
                                                                                        • Checks computer location settings
                                                                                        • Enumerates system info in registry
                                                                                        PID:6024
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9320,i,10610295679969261473,12160680163108842646,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=11048 /prefetch:8
                                                                                        7⤵
                                                                                          PID:1728
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8852,i,12718827629239401797,14536341434790770245,524288 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=10516 /prefetch:8
                                                                                          7⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:7456
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=7988,i,7805506792543513340,1496334357780195286,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=8464 /prefetch:2
                                                                                          7⤵
                                                                                          • Checks computer location settings
                                                                                          PID:7948
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=10824,i,10614423255244490340,9150735986632194218,2097152 --field-trial-handle=1888,i,12782199658557075177,2910692545827198942,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1892,i,14094808904528213110,17466334771114348243,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=7804 /prefetch:1
                                                                                          7⤵
                                                                                          • Checks computer location settings
                                                                                          PID:6616
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --edition=std-2 --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=130.0.5847.58 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --firstrunver=130.0.5847.58 --firstrunts=1776632793 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV9
                                                                                          7⤵
                                                                                          • Enumerates system info in registry
                                                                                          PID:6376
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff79b6bd738,0x7ff79b6bd744,0x7ff79b6bd750
                                                                                            8⤵
                                                                                              PID:6432
                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\Opera_GX_assistant_130.0.5847.58_Setup.exe_sfx.exe
                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\Opera_GX_assistant_130.0.5847.58_Setup.exe_sfx.exe"
                                                                                      4⤵
                                                                                      • Executes dropped EXE
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      PID:4244
                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\assistant_installer.exe
                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\assistant_installer.exe" --version
                                                                                      4⤵
                                                                                      • Executes dropped EXE
                                                                                      • Loads dropped DLL
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      • Enumerates system info in registry
                                                                                      PID:2344
                                                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\assistant_installer.exe
                                                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0xfb4040,0xfb404c,0xfb4058
                                                                                        5⤵
                                                                                        • Executes dropped EXE
                                                                                        • Loads dropped DLL
                                                                                        • System Location Discovery: System Language Discovery
                                                                                        PID:4816
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,6308500919988853910,17279312123119179178,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
                                                                                  2⤵
                                                                                    PID:4604
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3700,i,18324176162823148850,16824665609888873762,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:8
                                                                                    2⤵
                                                                                      PID:4908
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6508,i,14089078887851417835,10226200008710118602,262144 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:8
                                                                                      2⤵
                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                      PID:1972
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,8588631568060465465,13159295884986479042,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:8
                                                                                      2⤵
                                                                                        PID:8804
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=4772,i,2113959051987792410,17206135368578328715,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:1
                                                                                        2⤵
                                                                                          PID:8068
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=5200,i,4922277614760330889,5416542444640548991,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:1
                                                                                          2⤵
                                                                                            PID:6896
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,7561343201277407479,12969773655569004904,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:8
                                                                                            2⤵
                                                                                              PID:7380
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=4820,i,1943318905684002505,10168546756731197856,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:1
                                                                                              2⤵
                                                                                                PID:8408
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=6668,i,5064950851270816543,9047916224355182158,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:8472
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,1809089499668568733,10946551011292706508,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:8
                                                                                                  2⤵
                                                                                                    PID:3980
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=5432,i,3675444765054688067,12011500907541458335,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:8708
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,10232854462473755279,9335063726731632059,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:8
                                                                                                      2⤵
                                                                                                      • Modifies registry class
                                                                                                      PID:4272
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4656,i,11424165272885993890,14105926906495772331,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=7068 /prefetch:8
                                                                                                      2⤵
                                                                                                        PID:8800
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=6100,i,9078127216276427410,5393688469691014334,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=7044 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:7024
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=4844,i,13017346421989424973,3130616144064194508,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:7476
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=7336,i,14534083497637437995,8780310695541815031,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=7260 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:7876
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,17828369529172320762,14707119492762976427,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=1552 /prefetch:8
                                                                                                              2⤵
                                                                                                                PID:7460
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7468,i,9975909938538396800,4361902643348871725,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=7472 /prefetch:8
                                                                                                                2⤵
                                                                                                                  PID:8672
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7620,i,12982672709679182270,16149205675805655601,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=7632 /prefetch:8
                                                                                                                  2⤵
                                                                                                                    PID:7060
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=7788,i,17832052228363109385,12715821391428805907,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:6260
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8024,i,3326937555089610270,5810825324223442620,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=8004 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:6876
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=6604,i,516081068126242562,9614705110111372168,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:5336
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=7956,i,16763324282992824553,5682047381014710229,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=7856 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:5176
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=8216,i,8356240570263624667,2535946337613103087,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=8032 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:5184
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8172,i,4391376433446729348,12605180677904142590,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=7820 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:8012
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7888,i,4787238049108964766,2933698259535200610,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:8
                                                                                                                                2⤵
                                                                                                                                  PID:7684
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=8404,i,6079105295174979258,16927399155709403318,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=8376 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:5480
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8600,i,7109340921901116418,6977277480354637677,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=8588 /prefetch:8
                                                                                                                                    2⤵
                                                                                                                                      PID:6336
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8616,i,181094475837143628,12944403909498099705,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=8612 /prefetch:8
                                                                                                                                      2⤵
                                                                                                                                        PID:6736
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=3468,i,36041016853604512,10720843813198254769,2097152 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=8604 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:6780
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8728,i,8514123075131932421,3570319924239158534,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=8736 /prefetch:8
                                                                                                                                          2⤵
                                                                                                                                            PID:8776
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8896,i,9676909218312659128,10190605030699685461,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=8656 /prefetch:8
                                                                                                                                            2⤵
                                                                                                                                              PID:9212
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9040,i,15390236005027987326,12776181707751216723,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=9044 /prefetch:8
                                                                                                                                              2⤵
                                                                                                                                                PID:5920
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8888,i,7470545177818802356,3608469882923307928,524288 --field-trial-handle=2272,i,1703464003983694968,15327325221567622703,262144 --variations-seed-version --mojo-platform-channel-handle=9208 /prefetch:8
                                                                                                                                                2⤵
                                                                                                                                                  PID:7236
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                1⤵
                                                                                                                                                  PID:2356
                                                                                                                                                • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                                  1⤵
                                                                                                                                                    PID:5752
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"
                                                                                                                                                    1⤵
                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                    • Loads dropped DLL
                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                    PID:6492
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7ffb954ec540,0x7ffb954ec550,0x7ffb954ec560
                                                                                                                                                      2⤵
                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                      PID:6532
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                                                                                                    1⤵
                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                    PID:7736
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff79b6bd738,0x7ff79b6bd744,0x7ff79b6bd750
                                                                                                                                                      2⤵
                                                                                                                                                        PID:7000
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                                                                                                                                        2⤵
                                                                                                                                                          PID:8212

                                                                                                                                                      Network

                                                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                                                            Reconnaissance

                                                                                                                                                            Resource Development

                                                                                                                                                            Initial Access

                                                                                                                                                            Execution

                                                                                                                                                            Persistence

                                                                                                                                                            Boot or Logon Autostart Execution

                                                                                                                                                            1
                                                                                                                                                            T1547

                                                                                                                                                            Registry Run Keys / Startup Folder

                                                                                                                                                            1
                                                                                                                                                            T1547.001

                                                                                                                                                            Event Triggered Execution

                                                                                                                                                            1
                                                                                                                                                            T1546

                                                                                                                                                            Component Object Model Hijacking

                                                                                                                                                            1
                                                                                                                                                            T1546.015

                                                                                                                                                            Privilege Escalation

                                                                                                                                                            Boot or Logon Autostart Execution

                                                                                                                                                            1
                                                                                                                                                            T1547

                                                                                                                                                            Registry Run Keys / Startup Folder

                                                                                                                                                            1
                                                                                                                                                            T1547.001

                                                                                                                                                            Event Triggered Execution

                                                                                                                                                            1
                                                                                                                                                            T1546

                                                                                                                                                            Component Object Model Hijacking

                                                                                                                                                            1
                                                                                                                                                            T1546.015

                                                                                                                                                            Defense Evasion

                                                                                                                                                            Modify Registry

                                                                                                                                                            3
                                                                                                                                                            T1112

                                                                                                                                                            Subvert Trust Controls

                                                                                                                                                            1
                                                                                                                                                            T1553

                                                                                                                                                            Install Root Certificate

                                                                                                                                                            1
                                                                                                                                                            T1553.004

                                                                                                                                                            Credential Access

                                                                                                                                                            Credentials from Password Stores

                                                                                                                                                            1
                                                                                                                                                            T1555

                                                                                                                                                            Credentials from Web Browsers

                                                                                                                                                            1
                                                                                                                                                            T1555.003

                                                                                                                                                            Unsecured Credentials

                                                                                                                                                            1
                                                                                                                                                            T1552

                                                                                                                                                            Credentials In Files

                                                                                                                                                            1
                                                                                                                                                            T1552.001

                                                                                                                                                            Discovery

                                                                                                                                                            Browser Information Discovery

                                                                                                                                                            1
                                                                                                                                                            T1217

                                                                                                                                                            Peripheral Device Discovery

                                                                                                                                                            1
                                                                                                                                                            T1120

                                                                                                                                                            Query Registry

                                                                                                                                                            6
                                                                                                                                                            T1012

                                                                                                                                                            System Information Discovery

                                                                                                                                                            5
                                                                                                                                                            T1082

                                                                                                                                                            System Location Discovery

                                                                                                                                                            1
                                                                                                                                                            T1614

                                                                                                                                                            System Language Discovery

                                                                                                                                                            1
                                                                                                                                                            T1614.001

                                                                                                                                                            System Time Discovery

                                                                                                                                                            1
                                                                                                                                                            T1124

                                                                                                                                                            Lateral Movement

                                                                                                                                                            Collection

                                                                                                                                                            Data from Local System

                                                                                                                                                            1
                                                                                                                                                            T1005

                                                                                                                                                            Command and Control

                                                                                                                                                            Exfiltration

                                                                                                                                                            Impact

                                                                                                                                                            Replay Monitor

                                                                                                                                                            Loading Replay Monitor...

                                                                                                                                                            Downloads

                                                                                                                                                            manifest.json
                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1320191502\manifest.json
                                                                                                                                                            • Size 160B
                                                                                                                                                            • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            manifest.json
                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1336924438\manifest.json
                                                                                                                                                            • Size 43B
                                                                                                                                                            • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            manifest.json
                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1642228720\manifest.json
                                                                                                                                                            • Size 85B
                                                                                                                                                            • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            manifest.json
                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1700406200\manifest.json
                                                                                                                                                            • Size 135B
                                                                                                                                                            • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            manifest.json
                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1846958142\manifest.json
                                                                                                                                                            • Size 135B
                                                                                                                                                            • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            manifest.json
                                                                                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_591908019\manifest.json
                                                                                                                                                            • Size 160B
                                                                                                                                                            • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            protocols.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            settings.dat
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                            • Size 280B
                                                                                                                                                            • SHA256 329f09584b2d1b595fd09386d31dbe1eec1906f7d450ee40fb405617035e9b3b
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            settings.dat
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                            • Size 280B
                                                                                                                                                            • SHA256 0b04489861797cec03fc7404687d31ed4755ebf931038495ba158cbbf77e5994
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            BookmarkMergedSurfaceOrdering
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                            • Size 6B
                                                                                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            f_00006a
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
                                                                                                                                                            • Size 34KB
                                                                                                                                                            • SHA256 5125c10807645fde11ab55f63655f00447a2ec066027c483783b7937bf12d69a
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            the-real-index
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 e7897f02c3ad317f92f7b0688f5640db76ef18726ba7817780551dacf7cdb760
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            the-real-index
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 bccea2c765e9b328ef2f9143470827bfec3dfd68b3c748b9e61ec2b305624e0f
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            SiteList-Enterprise.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                            • Size 2B
                                                                                                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            Edge Profile.ico
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                            • Size 70KB
                                                                                                                                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            verified_contents.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1565171717\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 6f64306515428487987fabde07ddf1646f64ad4e3dc4841e982d40ad91459822
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            filelist.txt
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1565171717\CRX_INSTALL\filelist.txt
                                                                                                                                                            • Size 134B
                                                                                                                                                            • SHA256 543c0e50c16159439d3dfb3f1151bc64e2f5b60a0e3824c5f93c4c5c14dd945b
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            LICENSE.md
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1565171717\CRX_INSTALL\third_party\babylon\LICENSE.md
                                                                                                                                                            • Size 9KB
                                                                                                                                                            • SHA256 4135d3051e1bfdccf0440f6d8867a6dc1e39587694995479c3e29826e53aff63
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            babylon.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1565171717\CRX_INSTALL\third_party\babylon\babylon.js
                                                                                                                                                            • Size 1.2MB
                                                                                                                                                            • SHA256 b5a426a0769b378e196ab2698c14a326d86ab2443010e16e4ac3cdde06371e6d
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            typescript.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1565171717\CRX_INSTALL\third_party\typescript\typescript.js
                                                                                                                                                            • Size 10.4MB
                                                                                                                                                            • SHA256 986134e07f34257fd85c084441c825d7d8951705a0b8c76b0d7c5499536cc959
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            DevToolsPlugin.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1726442491\CRX_INSTALL\DevToolsPlugin.js
                                                                                                                                                            • Size 8KB
                                                                                                                                                            • SHA256 fe217348fd4d7ea4969f563ea9dbfc778e6591098a6fb26f231f859bbcef0128
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            DevToolsPlugin.js.map
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1726442491\CRX_INSTALL\DevToolsPlugin.js.map
                                                                                                                                                            • Size 16KB
                                                                                                                                                            • SHA256 1aa1227de1acd3b490b9fc09a2165788cb78afb9e0795a5d0a75f007206f907d
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            NamedFunctionRange.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1726442491\CRX_INSTALL\NamedFunctionRange.js
                                                                                                                                                            • Size 1023B
                                                                                                                                                            • SHA256 aa5606bd8607fbff0998828a2285421f67bf46c986217a23bf54b8b9c62f9e96
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            NamedFunctionRange.js.map
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1726442491\CRX_INSTALL\NamedFunctionRange.js.map
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 a03e6965ec2315ae26572a646e4477fa341630038a50762149a19978a91a2389
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            verified_contents.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1726442491\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 5b1fc94e2b28caf5ccbea9574de0e42c860401620f0763c10cabe3a05a7154ad
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            typescript-tsconfig.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1726442491\CRX_INSTALL\third_party\typescript\typescript-tsconfig.json
                                                                                                                                                            • Size 91B
                                                                                                                                                            • SHA256 69500e16f1f9355aee311a80fe52f531ba348bb7f6d4667a2d33c3cd75113759
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            typescript.d.ts
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1726442491\CRX_INSTALL\third_party\typescript\typescript.d.ts
                                                                                                                                                            • Size 486KB
                                                                                                                                                            • SHA256 2b06ea0beb73119a4294b56961eeb2337c6e706c8f0311de1bb49ca47c92abd5
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            typescript.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1726442491\CRX_INSTALL\third_party\typescript\typescript.js
                                                                                                                                                            • Size 9.2MB
                                                                                                                                                            • SHA256 eb27b35a442aab5e5963127d468c1c4ba0009fa67e18b2faf73f5e1bc1ddc6ac
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            typescript.js.map
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2800_1726442491\CRX_INSTALL\third_party\typescript\typescript.js.map
                                                                                                                                                            • Size 6.0MB
                                                                                                                                                            • SHA256 5842f1041fc42ef727b2fee220a55f00bf38eff815920207d8ae560169aef766
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Network Persistent State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 6eed393e9f3edd20db689e0767354c30ba5767eb5bea85373d1a6d5deb47301b
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Network Persistent State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                            • Size 111B
                                                                                                                                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Network Persistent State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 89f422ac6e9927a3252a83e89617b552ddd53d1b2300b1a091f11957192c5ea5
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Network Persistent State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 aa8b3317be2c319866714c6904975968da43a5c1e154427a4df1219ab468a310
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            SCT Auditing Pending Reports
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                            • Size 2B
                                                                                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            Preferences
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                            • Size 13KB
                                                                                                                                                            • SHA256 2cb11a5b000f04c46f39e25b2d3beddcb6ce949cd9bceb04e6e74678b3573e3f
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Preferences
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                            • Size 23KB
                                                                                                                                                            • SHA256 1001e8a763242fa960ad4fd0aec4bc0cb17d183fe6e8513c9719dc2fec679149
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Preferences
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 ac0c099306f0407e0fa5a97a77e50068edf0d6d82dbf2b8bfd37ca4f2fd4c029
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Secure Preferences
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                            • Size 38KB
                                                                                                                                                            • SHA256 ea260291a853945053182fbb33abe8b2402534607aacf63d3cbfaee5bfae9375
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Secure Preferences
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                            • Size 35KB
                                                                                                                                                            • SHA256 824da834be0ace1f90f044615228a76351cbed4b4c7e084d170dea03b907bb75
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            sync_diagnostic.log
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                            • Size 4KB
                                                                                                                                                            • SHA256 442d8d65494038e461727cf9efd2d284ca45769185714743edb81cc25a17d32e
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            94c72cde-e5c8-43d3-a3dd-e4ebce18408e.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\94c72cde-e5c8-43d3-a3dd-e4ebce18408e.tmp
                                                                                                                                                            • Size 22KB
                                                                                                                                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            office_endpoints_list.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Local State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                            • Size 29KB
                                                                                                                                                            • SHA256 9c8593abb87f181ddfe2c19f8e7d06e57d02a6595fc5db0cc22f220a734e888c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Local State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                            • Size 29KB
                                                                                                                                                            • SHA256 333fedc8b55bd796e3e53b4e8643937bbf1b54beaa2e1d470971b82cbe0bb0c7
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Local State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                            • Size 28KB
                                                                                                                                                            • SHA256 2b241a6091d561cb8a1d0d2648bf29181b237de206f872540d2bd4b16e22d290
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Local State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                            • Size 18KB
                                                                                                                                                            • SHA256 b692303bb45f3f1e49f35f9980fd8045ca776445129a4f7d5ec98fc7687246c7
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Local State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                            • Size 29KB
                                                                                                                                                            • SHA256 3eeb7a57a2bff6ac1ef76abf51ffeb2682d84d7951b0161d4659dc0d8fb53046
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Local State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                            • Size 18KB
                                                                                                                                                            • SHA256 5601e6d3acdefca282f8bdbf139718e281d09bc674387dd1c5814be16813d2fd
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Local State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                            • Size 36KB
                                                                                                                                                            • SHA256 bf00d1db55b475bea7fa80e24953e30ca7fe044228cdcca62cf7fa0e5efccd10
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Local State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                            • Size 8KB
                                                                                                                                                            • SHA256 acef426d696467bf02005f118696cbc655551ed2c002a359b7d119ac38c0286c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Local State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                            • Size 8KB
                                                                                                                                                            • SHA256 7fee51de984a0f2ff12fdaf209e93889b111bd16ddc58a49aa0ba625a8a2f127
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            RevisitationBloomfilter
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                            • Size 392B
                                                                                                                                                            • SHA256 112abd7163f7c27bfe82bb55f24fa907ef3d6c20fc1b375ff45157a1fc88548b
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            RevisitationBloomfilter
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                            • Size 392B
                                                                                                                                                            • SHA256 97a01f78036da63d794e7282fcb61ffef3d0425367354d35a0dcf019dd7b094f
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            RevisitationBloomfilter~RFe5b0a4d.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5b0a4d.TMP
                                                                                                                                                            • Size 392B
                                                                                                                                                            • SHA256 a9265d3f89158746cf33fe6690805f0cf5918117b4f82e759ce672ba20957733
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            nav_config.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            metadata.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                            • Size 252B
                                                                                                                                                            • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            metadata.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                            • Size 612B
                                                                                                                                                            • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            metadata.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                            • Size 492B
                                                                                                                                                            • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            metadata.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                            • Size 132B
                                                                                                                                                            • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            metadata.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                            • Size 372B
                                                                                                                                                            • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            metadata.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                            • Size 732B
                                                                                                                                                            • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            70a25692-8a4f-4718-9a40-b81d04eb5b08.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\70a25692-8a4f-4718-9a40-b81d04eb5b08.tmp
                                                                                                                                                            • Size 13B
                                                                                                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 00f4351e78adf10c1afe7668c13482081cea9ed44839a08547b5ead8395f8536
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            130.0.5847.58.manifest
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\130.0.5847.58.manifest
                                                                                                                                                            • Size 225B
                                                                                                                                                            • SHA256 b36f65b8206904273866c6a34e99bd0cf4b72dbaa46073d8f9051cb22a64196d
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            150x150Logo.scale-100.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-100.png
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            150x150Logo.scale-100_contrast-white.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            150x150Logo.scale-140.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-140.png
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            150x150Logo.scale-140_contrast-white.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            150x150Logo.scale-180.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-180.png
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            150x150Logo.scale-180_contrast-white.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            150x150Logo.scale-80.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-80.png
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            150x150Logo.scale-80_contrast-white.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            70x70Logo.scale-100.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\70x70Logo.scale-100.png
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            installer.exe
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe
                                                                                                                                                            • Size 9.0MB
                                                                                                                                                            • SHA256 7d1dd50b92b57b961638feb122accf1c670b33807221b9c2336b5d9c2eb2cd79
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            custom_partner_content.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\resources\custom_partner_content.json
                                                                                                                                                            • Size 245KB
                                                                                                                                                            • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            installer_prefs.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 442f9aa98f396bd57b6a68c14fe5e49b19084bf26b3bdd926a47388afa3ab0d7
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            opera.exe
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                            • Size 2.6MB
                                                                                                                                                            • SHA256 3eb1a2f751e85be99426bad0cfa580ca19a608a7e121b2f1cb597f95a5347ea6
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Opera GX Browser.lnk
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\Opera GX Browser.lnk
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 f5a7289e00d6673b2c34f8ad2ee0368e4c96f4bea52de7eb702be01a6edf27d5
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            additional_file0.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\additional_file0.tmp
                                                                                                                                                            • Size 2.8MB
                                                                                                                                                            • SHA256 1ef33f3f50727d57dda98c03db5f759fc66315965fda144dbcbe41e3d0720265
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            assistant_installer.exe
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\assistant_installer.exe
                                                                                                                                                            • Size 2.5MB
                                                                                                                                                            • SHA256 39284ef1695bee19a8fa544f64215eb9fa49dc97b05bca3499d0a2781055929c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            dbgcore.dll
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\dbgcore.dll
                                                                                                                                                            • Size 222KB
                                                                                                                                                            • SHA256 e26ae1b6f5a828c108addee11e0688eab08142b014366d9ab919c8ca41c1cb14
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            dbghelp.dll
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\assistant\dbghelp.dll
                                                                                                                                                            • Size 1.8MB
                                                                                                                                                            • SHA256 815bf4f300630117dde0c4fb4605550e84bf70a918bc8444f5cb1904f518e32c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            installer_prefs_include.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\installer_prefs_include.json
                                                                                                                                                            • Size 363B
                                                                                                                                                            • SHA256 7bbfeba8b9ed19035f2114c91c7063fc7fb614b7f9bc61b2110da4dbab58b3a5
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            installer_prefs_include.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\installer_prefs_include.json
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 39d056be392ff0bcc6beb03781245fc40d6d4e71a0d8e59a65059b4834d7f0be
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            installer_prefs_include.json.backup
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\9191f42e-6236-40b9-a2bf-f08964b636bd Opera GX Installer Temp\opera_package_202604192205571\installer_prefs_include.json.backup
                                                                                                                                                            • Size 348B
                                                                                                                                                            • SHA256 e31780a38655ce5082342c9b97ff06ad473c69e3bcf9c237c184715954528aa0
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            12ad9d46-6b65-41b4-a1bf-66ee4c3496dd.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\12ad9d46-6b65-41b4-a1bf-66ee4c3496dd.tmp
                                                                                                                                                            • Size 1B
                                                                                                                                                            • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            30c34b9e-80eb-4e01-9eb2-b6760ab1e26a.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\30c34b9e-80eb-4e01-9eb2-b6760ab1e26a.tmp
                                                                                                                                                            • Size 147KB
                                                                                                                                                            • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            651ba334-9752-4fb5-8159-97d8f5ab885b.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\651ba334-9752-4fb5-8159-97d8f5ab885b.tmp
                                                                                                                                                            • Size 3.0MB
                                                                                                                                                            • SHA256 2d69203739eca77886457d27c0df44eca47da02810061a7f5e15288c2e643f23
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            installer.exe
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\7zSCFF64FE9\installer.exe
                                                                                                                                                            • Size 9.0MB
                                                                                                                                                            • SHA256 ffe37c5e6519b2992735665c5001c9364824b2148baeb6ac8799ca7f208ae00e
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            9a1998bf-0c5d-49fe-9c27-d87277bee96c.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\9a1998bf-0c5d-49fe-9c27-d87277bee96c.tmp
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            e59d78d8-d18c-4512-8f57-603f74309786.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\e59d78d8-d18c-4512-8f57-603f74309786.tmp
                                                                                                                                                            • Size 2.1MB
                                                                                                                                                            • SHA256 efdad7555293ec2d14399c2c2fc9d07228de1f6e3746b27da621b76fe5ceea07
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            content_new.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2800_1349366729\CRX_INSTALL\content_new.js
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            DevToolsPlugin.html
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2800_1996384796\CRX_INSTALL\DevToolsPlugin.html
                                                                                                                                                            • Size 220B
                                                                                                                                                            • SHA256 fd59488175e43bb4713fd621e785b618fc647a3521d305874722bd6b7fd1c649
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            manifest.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2800_1996384796\CRX_INSTALL\manifest.json
                                                                                                                                                            • Size 766B
                                                                                                                                                            • SHA256 072441aff81b94a2d6a4cb7e86c40fe27ae8a9701f7d466f76db124fd3d54330
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            LICENSE.txt
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2800_1996384796\CRX_INSTALL\third_party\typescript\LICENSE.txt
                                                                                                                                                            • Size 9KB
                                                                                                                                                            • SHA256 43692cfafa6a5c09136cfa0138b9c78efeb56ee6b9174553dbf704b888771f6a
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            manifest.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2800_889119863\CRX_INSTALL\manifest.json
                                                                                                                                                            • Size 658B
                                                                                                                                                            • SHA256 fea905b763b26db02673c6ab14f422b21eff64de59351f0818b501dd4e7f9430
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            58e70d89-9c5d-44a9-9566-ca1fe22d954e.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5192_1523997052\58e70d89-9c5d-44a9-9566-ca1fe22d954e.tmp
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 d6a7b4d351a6a936a754f7468b3d2ec511690c58e971f4c88b9550eb91acb3df
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            7473b5ea-5876-4f09-a447-1ce1a3c04214.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5192_34595179\7473b5ea-5876-4f09-a447-1ce1a3c04214.tmp
                                                                                                                                                            • Size 2.6MB
                                                                                                                                                            • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Icon_Light_Neutral.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5192_34595179\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            9c7008af-02c4-4852-b05d-1649fc0e8b80.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5192_667276851\9c7008af-02c4-4852-b05d-1649fc0e8b80.tmp
                                                                                                                                                            • Size 472KB
                                                                                                                                                            • SHA256 791c81ca1b16b333a947dc63cc0dee14aba5a4f82a7fd5379e42ed40bea8c41e
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            favicon_opera_one.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5192_72370743\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            b68459a3-a87e-4ae7-9d89-e4d6a71489d8.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5192_72370743\b68459a3-a87e-4ae7-9d89-e4d6a71489d8.tmp
                                                                                                                                                            • Size 5.5MB
                                                                                                                                                            • SHA256 6a6d3e9600898b2b4ec003c5cdeecea3a3e45cf49e080baac63520530e9b1a24
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            0E992VKEUC7VRMRM9OHP.temp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0E992VKEUC7VRMRM9OHP.temp
                                                                                                                                                            • Size 21KB
                                                                                                                                                            • SHA256 5af6650e22e5619396b85fcd10063d263d276ebec4c05298dd06db6a479a5a4b
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            settings.dat
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                                                            • Size 40B
                                                                                                                                                            • SHA256 bc0f6a724ab9c4b9bee344631a74effb9c66ecce808e3be9f58c70c62e75dc04
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            14213191-1a57-41bd-a8ba-040228950cb5.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\14213191-1a57-41bd-a8ba-040228950cb5.tmp
                                                                                                                                                            • Size 489KB
                                                                                                                                                            • SHA256 e717191e38f4201a1d9dc1bb3b4ed4590e553057076dd6c68be0b4f878d43aa4
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            the-real-index
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 ebff62c559f155cd587087cdfd301a6897aa841b7c66cbd7e01da4f77f1fdcc4
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            the-real-index~RFe5a9462.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index~RFe5a9462.TMP
                                                                                                                                                            • Size 48B
                                                                                                                                                            • SHA256 f9f442e67fd74ae1f37a5ecb8be23f8d6f98b9584dc95bdbb3c1ad31f53accb1
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            CURRENT
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\CURRENT
                                                                                                                                                            • Size 16B
                                                                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            messages.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\_locales\en\messages.json
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            background.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\background.js
                                                                                                                                                            • Size 17KB
                                                                                                                                                            • SHA256 7c44c782b5e658ceeb46850ec34e316a90d1010d034706f6e5a980f48b8f1398
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            twitch16.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\icons\twitch16.png
                                                                                                                                                            • Size 369B
                                                                                                                                                            • SHA256 c89fb8d1c2db84a460b0d01efb2584710802a85c58efbc6963ce345343c1d1f3
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            twitch48.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\icons\twitch48.png
                                                                                                                                                            • Size 924B
                                                                                                                                                            • SHA256 121a7d5d60e86eab44e0f133b03be279b200a58d2c113e063f46005f1bb20208
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            cos-bridge.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\cos-bridge.js
                                                                                                                                                            • Size 173B
                                                                                                                                                            • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            cos-content.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\cos-content.js
                                                                                                                                                            • Size 502B
                                                                                                                                                            • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            main.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\main.js
                                                                                                                                                            • Size 46KB
                                                                                                                                                            • SHA256 251d7ccab9ed6ea88bf36dff429cb6e1ce196465451fa877c63b97712cb20aca
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            favicon_opera_one.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.28.0.3_0\favicon_opera_one.png
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            service_worker.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.28.0.3_0\service_worker.js
                                                                                                                                                            • Size 55KB
                                                                                                                                                            • SHA256 33b0859347e02c9142fd7823b297714b88e474c8278f4778efdfb01f1e6b8034
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            vendors.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.28.0.3_0\vendors.js
                                                                                                                                                            • Size 2.3MB
                                                                                                                                                            • SHA256 5de428dcb2382b4110d4389a413cf40ae435b16b942e37cf9416022c6fb9b67a
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            webpage_content_reporter.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.28.0.3_0\webpage_content_reporter.js
                                                                                                                                                            • Size 113KB
                                                                                                                                                            • SHA256 2f60af001760683ef280d0e8fe5cb7d91317a3c2751de436b7547c9798f6ccfc
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            background.js
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                                                                                                            • Size 86KB
                                                                                                                                                            • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Icon_Light_Neutral.png
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 2ab8cc6f56fb252cebe597a68724d4a60e604f87014a71f27afa865fab6309de
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            popup.js.LICENSE.txt
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            rules.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                                                                                                            • Size 839B
                                                                                                                                                            • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            MANIFEST-000001
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                            • Size 23B
                                                                                                                                                            • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            3e4c1b25-3f93-4204-b342-e92065e40761.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\3e4c1b25-3f93-4204-b342-e92065e40761.tmp
                                                                                                                                                            • Size 27KB
                                                                                                                                                            • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            4ed7d41c-8a0e-451e-97bb-9b8ded7d23a5.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\4ed7d41c-8a0e-451e-97bb-9b8ded7d23a5.tmp
                                                                                                                                                            • Size 27KB
                                                                                                                                                            • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            6f24ebf8-5f8c-4940-bda9-f7a29f16f60c.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\6f24ebf8-5f8c-4940-bda9-f7a29f16f60c.tmp
                                                                                                                                                            • Size 27KB
                                                                                                                                                            • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            7f274e17-5b4d-4217-9c2b-ed28dcd43911.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\7f274e17-5b4d-4217-9c2b-ed28dcd43911.tmp
                                                                                                                                                            • Size 27KB
                                                                                                                                                            • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            c968d7c2-dd64-4d75-9faf-aa7962a546fa.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\c968d7c2-dd64-4d75-9faf-aa7962a546fa.tmp
                                                                                                                                                            • Size 27KB
                                                                                                                                                            • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Network Persistent State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                                                                                                            • Size 5KB
                                                                                                                                                            • SHA256 2eca1becd9451ea84473ee5ce55262f4c95a115f021179f6149af80bd1db44ed
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Network Persistent State~RFe5a94df.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State~RFe5a94df.TMP
                                                                                                                                                            • Size 59B
                                                                                                                                                            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Preferences
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 cda30394329afd54c1335b27aae8fa720ef8f6fe095d89b01af8a1b46a218084
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Preferences
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                            • Size 12KB
                                                                                                                                                            • SHA256 d98734acd67d364a852c77d1b155f757022e8f8135de98225f0064f0aacf14b5
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Preferences~RFe5a8b1b.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences~RFe5a8b1b.TMP
                                                                                                                                                            • Size 12KB
                                                                                                                                                            • SHA256 ebf23451da5927ef9e563622b206e5ba89b8fa093e616c617779b254ec839402
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Secure Preferences
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                                                            • Size 208KB
                                                                                                                                                            • SHA256 07d5833e1a375d38d13d07957d0f2e9e81747a72c9deb45638f7e816d33c6752
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Secure Preferences~RFe5a902b.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences~RFe5a902b.TMP
                                                                                                                                                            • Size 83KB
                                                                                                                                                            • SHA256 4682bbfbb2e9f90edb408cbfb5e46795df109c38752996afbe86bdc09daa4c16
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            the-real-index
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                            • Size 456B
                                                                                                                                                            • SHA256 e1043e8ca0e24ec616f9ca2b83e96f5e19f4572196112173728111dea6ded3bf
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            the-real-index~RFe5a9404.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a9404.TMP
                                                                                                                                                            • Size 72B
                                                                                                                                                            • SHA256 99b21e366d8d8d7d6f939062978db18032810c9d88e7c3305042103c22ea0a71
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            37bae08f-0d52-4f7d-957a-346cdc8985e4.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\37bae08f-0d52-4f7d-957a-346cdc8985e4.tmp
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 1ba84d6dcc6f7aa0341affda9933569dd7e2cfd7def35ef167b4e7e27a02e4ca
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            6008b3cb-d8cd-4da2-8785-ec1c1434f4b1.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\6008b3cb-d8cd-4da2-8785-ec1c1434f4b1.tmp
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 7a917bd437e3f1b21b2ad582ea1d95f9aba653cdd7aed955c6daacc943fec0e8
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ab700ec3-e7d9-41dc-ae9a-3ee7e48d8a39.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\ab700ec3-e7d9-41dc-ae9a-3ee7e48d8a39.tmp
                                                                                                                                                            • Size 9KB
                                                                                                                                                            • SHA256 23bd040414d5f4ba80e17738081a69ef970a8530e6bbe7ec7dc7d3fb946e5bae
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 4cd609b0f1747c4e3930f2bead33c8df5f308525e93be05c7181dabc1475598d
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 541B
                                                                                                                                                            • SHA256 ef4daf3ea58d38d53d7120c12975400145f76b88f1b1c89bc11c8d5334a51399
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 829B
                                                                                                                                                            • SHA256 e840c2be2f10e003b693d62ea1a553e5944fd3be7857bff1c07adf820ce2b204
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 973B
                                                                                                                                                            • SHA256 20f886d0c64cfb164a5b9ff113e2912984877ca1166f67ed58421cf8af354541
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 f42cb22a48d4d27e92dacbd66e2a6991a74195770fa5b5078f8e4925e16d9e3e
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 9e48d1a8ea7ab22d909b3cfd205f7b8a023f977515060e443686e8bd62f38456
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 c762ce4a284361a3704558da808fa552ca0b0cc61e8907cbeb53c98c1fd59713
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 7a642015d75e4f27ee2ca4c7af9cd2d4aae9a6027cf2b7e6ad8a06ee1e81c4f4
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 13939d62a42ef4eaee61b339faa7c22450a85118afb7480ada199f4b5925b4d9
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 12KB
                                                                                                                                                            • SHA256 65a41dab7a52eb75414307d2e030f70574fda226ffaecc915cbffcce18adddd6
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 12KB
                                                                                                                                                            • SHA256 2d97bd29df510dd7fe5fb0e7774218cd60ea1308eb0e980b96e7332c3ba1454b
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 13KB
                                                                                                                                                            • SHA256 d3bdbcf9482355fb44862da9b29baad282b81466dae0272d6337262acdac583f
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 13KB
                                                                                                                                                            • SHA256 5fc8fe19e34dbd4b2fd007f47e7470859a5c375acab5e3d8dddb3a823d3b8b1e
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 13KB
                                                                                                                                                            • SHA256 2e6a50b0ad8bb975515a5757753a49536ba6f23c6c8d9d93cd7dab05a60de6c6
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 13KB
                                                                                                                                                            • SHA256 4c36425113a85475d85e9a527f7e994097a518e866de2977bb6280c7c7aba1be
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 13KB
                                                                                                                                                            • SHA256 97cc67e8842e6f090a8d3e6ba5b5ac1fa523aa5090da2feeafd60dba90e25197
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 13KB
                                                                                                                                                            • SHA256 74fef94177a2299ffebaf7c985889b59fb398085b303503be90bf0acb307e483
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 13KB
                                                                                                                                                            • SHA256 8a71ad8afa1c4bce8e0b133128801eab89a0c02a9fc8d758677939620ea2a32b
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 db74cc0303a272ff8ee41e6b8cc1e4d11a594da5ff2b05aa90529e0de2a36c9c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 e184f166510171d6eb91a1546166dddee068f2e1458b6b276d0e8f6579bafdac
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 717B
                                                                                                                                                            • SHA256 cfe2bc5331d0187837c33ddef4f7877bef60a9c0fd9b990381c38ce1a00412d1
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 c5c927508b10653e10595e080577bd8c01808b02dc57c021cff751763ebaea1e
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 dcd98d8dd54d23189d313d96d6c60fba25e6a7542fee6bb4d855478f7f0568e0
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 bb87d4c9cd2486db7c7bb8c0da6cd8edf63f3a93216d2f06cd893df3826e0721
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 a7793c3c8606ad9953667c842d9bb9fdaf7b208926818962f4f6025b920e8927
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 80388f6be0afd201116cfd1a1bec4b3775f037e08bc5d2686bab422d6b1b0a05
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 ec7ab750641b202f5b76cc89d46233347a006c36dcced9bc1082103829d4969e
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 4240dc3ec693746a27acb8e37c0168c608998a5c9ffd3bb807e460eafd84a7f4
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 423657b89e0acc18f2a2db59cca8cf0b445971bb72c0edc3abc440793ccb7049
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 c1537dab65ed9e0a0d48c38f1dd3d80343596e4529bc0d703402efd203252ebc
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 7890918c00ab5796845941c7c3d5875325258c9fe5da0c3c10a7780d7141056d
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 c1dd70da09e12f1f1f5a07dc088f61acce164137b1e4725830bde49d84cfc99f
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 915fad311c53a3d46fdc0fa3f5b9d7e7addcc9c4da642ad5b0ff9eaa5e877fa3
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 cd1add16fd3e239bc931886844877ad35973627abc169ef67325bd1c55595588
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 8744214e289b171e32b22a2072dec15c0e7c13d28bc8a17a0a300529cfcb2c32
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 6de40ba981903a03159acce8a60c5a83b7d236f3eed8c573465a3a7a26edf78b
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 0394b6fb9c33f06a6ac7add3f55133bc7f58c3fbea1b0784e0148a9a98fbdbe8
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 29414c6a80f464a24c727bdf3060a4af874721bdaba2b34b2889549b23429129
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 86835f07931131fc94fa40cd7df09c5445a2568b20a6f08dd9cc108dc9da943d
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 61c0565091b8a4e8b3bb15ee26411c201b60895b7acd35d58cd25442fab4b534
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 3d3a38211b4838a82b04b58fe1875c57f16a92c744646de403422408f3144051
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 ffd2e83e0492724b093442a7bb598f0390c3150082b5b2e885e79f67eac2b567
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 4KB
                                                                                                                                                            • SHA256 56f7ee6605ac143a286b14064be89d53d6f7e85225680bd5cc09ca835b45423b
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 4KB
                                                                                                                                                            • SHA256 11257a3426a8152615d12519134e35e6c96739120999857edba92fe27ba64adc
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 4KB
                                                                                                                                                            • SHA256 39e0cb913fa06b317143215b927b39a28e23b2e1e6f94002977b7cf3c487949c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 4KB
                                                                                                                                                            • SHA256 c616991207c1266dbbcf0cae7a6448b1bb69e7a570b8d8c917150f4188587c3e
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 9KB
                                                                                                                                                            • SHA256 9371787b3eb14232ed1882a3fce409f07ee70c7bb38c21f89774079c2349cb29
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 0482a3ba4c71a921ad66d833a69d856d1f8f7ced5b3d4f2b6263ba75b37bf446
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 021a415397c6e89dc513bd89c7817049e9a280c17294d9709aaf110259ee985b
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 1bb9fc61409e960d40ace930a2e2b9de75de002bc98c373c21d9623b9569c776
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 df8b1b8c5eb243f5b9b811ebc035e4995cf64fea923c084e5855cba4f660dd4e
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 820c6e4f0bebc28dc2551bafa7d728622a6e528533a42201a0695470c34bc5cd
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 2c80cc1784ea2ae1624a1de21e931acd80dccc8842eb56c0b2243ba4d796365f
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 75b987f4ca4108f96b05c0a215493051701b1d59988f2a4a32ba4981e98dc4af
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 83376c8e43867f38aec62aa8f0c0d85db4dbe0848963872224fecf9397c3d360
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 0126c6f5f891ca90d3c610961eda275bae46b75b8d940dba60403262d6d948a4
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 9964cb6b708b2a6bb004511a1fbe2a90cd23e35e4d724c75bf0252a84488cb34
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 0db1107ada1afacc567bcd4e3beba1445274c261f4076f40bafb6262df6371ba
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 25dda10511e3bc1e9435a85da63d01fe9e2963c3e8504dba0b53a02828dd09c1
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 606c4de42a42360940da3465f8147a0dd3d8d52121fba2ad8159765472f96d3a
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 ff6298fe73b082b7bffbb0a747782834a71cfff89648959d16a1e51be7566b1d
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 850bb1870d86c2ca8dea863f8c0675b738b1b891d4d9d0fabcd690ca9eba2175
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 d69c63a5947f05e4c756a68a83a1b9672f51a508ed188653743eb54dd22a32fc
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 c935cd1f23233a71a378b35f1fcbd76680cbf56e0c468de176b64934b8bf4a94
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 ddd15ba01536faedacaa309ca79ad35fbd9bccda0465aa9d0b06d68bc84fe7cd
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 a5daed33530db34f1b6bde39e634bc6a95423873ca8eda750d43b67eca59255a
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 16d9d81f5ed799e5b4490a2a4928bbabad214745a2b5399067dac10b5da67fc3
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 7298213984e56869e649db6c49bb810077d495fa53a0e9fdfc147ef767b0efe7
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 907a6f0ece21d61d91e5366096381e4e9b974f274f263f3fec90e545c6a9e48f
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 302ffc5dccb16d7ff02977bba4c47865a4db2190bc75be7a98d4d35e5514d1a0
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 ac8a2ca369ba8b175634b184b25fb183aeef5f69fe940a7a057fde5500e34475
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 0438ebf1cce68679fe2ebba73a6c07644ae2b77769f24bcf0299888357ea398e
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 571a624c4fa6059166d1a480acfec7a79dae891c8606600c0969a203d5cca343
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 5847baa0ca8fa1d0fac744dca0d84d5e725e38ee861d73a4498aa73a284184e3
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 1a95704632d25d4c42385a66fbd30f07d4baa892a97e9717b875910a59575ee5
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 c330db39b2adb8290c412fa947662999d2a52493b6281dc843ce11f5fb01b807
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 689a771b3fd6f75da761d4a866fb2ef777420cd5e36ee63b2defe15e025bdad5
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 bbcf012114403c68f1fab9647ff25f2c2b3a8a50b322dc4d890320ce7b2b2945
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 83302fdbfe28637ef78faf46a2caf708e097f317dfb2b777b100fef93621d5b8
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 6e9f7d2b9c564aaa6b366e877bbb574790ac78766b56d93ce34122225c6f5968
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 76d133c7d137301fdb486c7d5e2bcec0d72eaf169313cd8a4a9eb2dc9753a2f6
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 579e57db02a43843c0081377a31bc52f436af91b7589a8cc0b387fa10ea9b906
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 360fd9c356e8cc7ac7913725b55815fe8ea18777553170f7bea7d66ce9d9510b
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 ed7c9a0f8a4df637de7eee806789a3c3706336e9b750175ef9c0e75ca1f3e82b
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 c50c37b5bed0e8258198a0fd43564969d5c568502c0f5e22fda280bed17bc08e
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 12KB
                                                                                                                                                            • SHA256 46ffd39dd615ffc091f09a55dcd78639d8e69ff4af433e5aba47c274b56b2742
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 850d5d2a2b9f5a0cba9775c22c9b83ba64371253a82df2812fd30aaa524c34b0
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 13KB
                                                                                                                                                            • SHA256 bc5254a923721b7c1e1aa7878dfa8504b5341294a12a2a48ae6e79da4edbf9d8
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 13KB
                                                                                                                                                            • SHA256 be2e6a7823feb08eee7f80df354be2e2d77994ce37640aef44bbfd173f880ed5
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 13KB
                                                                                                                                                            • SHA256 c0526ef058a8fda323f9a403272039dcdd059550b1f644ea9c046d6442d4f6e2
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 7c96f965c283f5c7156623fafe7389ad7fbb39c18da759cd8d3198853dc77dac
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 c61c9c25ee1645eeac8ced7fe9ded6e028c014d696183bc774097a8b2c97881c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 3a48af9560fe1658d8564c62eacc2d27a61e34f7f96951ec0a9bf95ca0265fa6
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 8443389c1348f6efbce8302c47bce29bf3e15218ca9d6fcd74d20f00df2509e6
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 70a646d329fe8122943ad670e9f1f76f5386effcc07e804c506ccbc226dfcc21
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 e5752bc82c78dedaa89d743112660542220573f02ef9b3f8152df7d5c955e45b
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 5e44c33ebfeb90a0ef5a7efe8e134c22e30d8a24f9074555f1d5e9e25339766c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 6ec03ee9c8c694bf1ce166db5b738ba87c622e1f58068e37382b8fce826b512b
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 f3a6cb7cc16a1f6eb0af7702a55f6a075e999eea9df3aeba35d586463fe51c2c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 852a489b54893627961ac74dec0fe50b02357163ab210d2b838c0f09d5c23934
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 5cf0474da9d2c2abb4b6d0528151694a6b03f8f42b0a0ecaee9ac918d6242de7
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 40cf4e804837f021f5bffc20f4d6d5f6dcd6fcd0cec8d33ca2a859430ee27a42
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 9KB
                                                                                                                                                            • SHA256 bf23c55087e2192ed0570db2a3cf1828d2588ba5f017d5d4fbfae81a7df7307d
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 cfb9ba75a24b0c6b9b3b4440cf93dcb33f7f166efc14130de63e50a8d1cc40cb
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 7428eb766e150ca212482b04776a579397554bb9278b1aa612cff4a75276374e
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 11KB
                                                                                                                                                            • SHA256 032178700d28b87c52e0326a2f1458d1a4a0d2372c27d1691f3eb307dfaccbe0
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 a70b80a2bae5552ac7210f0021489c27680fcc677e440b6dafa88f447849cc87
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 077541e21eec533a2524bbfc9ff0a510eacb8b0a41c0ed0d8db735a09430ae94
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 68daa611a92679cbb1af3831039a01697b30b87a96ccce07ed61db8c19f13cb7
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 3b83c1d44b30046a308760073aabde9faa1fbc07a4739f086100e110c9cd95e0
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 353164cc259df6d27fe7d9338565aa99f62f2731640b3f8a69713c3a28a22247
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 f4349baf2213f67681f856bba725de0a0dbfbcdf1e2a804e4d48506443616ce7
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 5f8b98e2f4e8fb4a54b378bf5cdc39a9f80cd0be77070debc3abaa492397870a
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 d9a6f3873f0bd1e88136459bc174d25d39ef1d4cbe93e6aee0decd74487c0f30
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 399be423561377c17cf38f13aeaabe933022436e2139a00565b8f50bf1691c60
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 ccfc49008f8a3857ab56c936de33ec56f3ca6512d533c2463a59391fbd133d1f
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 3068640c63cfb090b5b4281a0c14669a05c8a6ccc6cf3c22e2dbb5ca383359a4
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 986d101dfa6e73547eca5304140c4cbbc16f29e6577efbd4e55b1ef5ac25e430
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 10KB
                                                                                                                                                            • SHA256 533b71eb1ce402c1619d8b3c36e85ca78ac1902bb42fa0f1f4965768a379257f
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 de4abb81f002e51d3daa2cf52355d5c7fad91a12c22ae3394d00b7710a04d6cb
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 ba7b42fd5a65cbb59291177c6faab3d60b08b0d64f0b04fa3992bcffcefe6a71
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 fdd6dbf94e4acca3fd33aa30f097471cba9d5a760134b44e6d4a3aafaa91ab38
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 7ac8a14a080979dc5cb2329c81e756fa0b24c1e7b124e04c427650a700f3f4fb
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 c6084281fe2e7edf0d5e39ed6fe4ca22c5e57f3d6e867a1e6f936d8d86e14106
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 3f91166f341ae686e355480774d6223fe565c7b46f3fe0be7c7e3c6608f3f57a
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 519960f5a7c446df0114ccba850ef1aac98382456095196ea8444c66138158ca
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 4ebbb5b26bd01fae0650df4d5923476104571886f4559f034a0a56e08e2a9801
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 375c5018906cdc01a1f10854e3443522c226171d448991a3a63ef3a61cdc8ff4
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 0d392902db6facf51c55803828dc8eda7f0b41452e56a5c4246bdf448c1d9a1c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 57b9a3649d902f7eecf85374a2478622a0dfc79a96b059e65302d7da1bd8deff
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 c919d1e9d91a717fd4f6b7bc9844df5db06f1b2f2cf0a24192f223e14ed0e734
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 b501ffe90d18256c8c7299b46a8c59a0da5a1636058d98d124edeeea1a228023
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 88940e77da466cd390aa7a794f95a9e9c4b6e8f9ef85c5ee5ef043ded87980f8
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 cf4e168ed7a6d284a91f7ee0d83ca2a3fc715a1ec702f1450d43ce489ce3d182
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 3d7e9d31278e819265075b6d8ca7cb2fef01833f0a56825b52b9fd4baec03858
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 2c01e35f862588a5cf537babc2a45eb3ca81c9454edf8c96f9f3e0c4ed2c9f0e
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 6dde123dbff239216c7fd4dff365cba98ec4c80fb34d21e7ec528c83f2ae6316
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 fcc8d721de3845a4bf7291a6644a16ddbf0ce1c00aa5f325d7cf8cac840ea49d
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 89824e4488ba59c889f0e18f929a2209759545ccb1913c6504e17800be1ee0f0
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 c2350baecd229990ab392d86e69796e9d4914a70be9c22248b5ec215bf916c0d
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 911e8009f10c53afa1ba916fd572cbe6b2f20a9352487093d6808b82d93869d3
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 0b4085b499ce03ef581da580e6ab8bab2dfb4450de5424de439aa9387eb59397
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 14KB
                                                                                                                                                            • SHA256 d0a324ffc40b2e425ee90e3f0e20916faaf539f4e747dc4652e7da617b557dd4
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw
                                                                                                                                                            • Size 15KB
                                                                                                                                                            • SHA256 662eabf2dd98025b3e1eb8c8ca8ba26138360a2ec07fbb9650c0bba64ce421c1
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw~RFe5a41fc.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8efc8f76-3bf5-45b1-be8c-43e0f7f754aa.raw~RFe5a41fc.TMP
                                                                                                                                                            • Size 429B
                                                                                                                                                            • SHA256 01dc86d31400983a958201a9cb1912453fcbe1001e97a766c387fca4b0d0e34b
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            MANIFEST-000001
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\MANIFEST-000001
                                                                                                                                                            • Size 41B
                                                                                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                            Submit Download

                                                                                                                                                            a6e2e898-5d41-4092-a647-d7555b54bcbb.tmp
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\a6e2e898-5d41-4092-a647-d7555b54bcbb.tmp
                                                                                                                                                            • Size 162KB
                                                                                                                                                            • SHA256 655050396cfac8e23abeed21171996030b98d079090918ccf869830caa20cf6b
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 690B
                                                                                                                                                            • SHA256 8bcbd76b4be7f26925cce68cc6660045d1a4fafd05f8ecf7587f9ce64cf43b3f
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 689529ca6d9135b7dcdb9020dcbcaf7fa20ad85a51ebb3052d619e6a6860f388
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 505B
                                                                                                                                                            • SHA256 9e22a529f690561f4128a1ee0dc2e56797f23c43473a58b30ed8d8e6b0ba9368
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 597B
                                                                                                                                                            • SHA256 85938364f11be682ae24b6242b7bc88355fbcd83b39f2856c65a5b67e0d479b8
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 779B
                                                                                                                                                            • SHA256 52b65e392c461f95eed41adcc82ca47ea263fd200b8930575f6d12e14140ae39
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 876B
                                                                                                                                                            • SHA256 e6141f92f916bc2f3761d9dce406994d8cdc1822d190349327e0268929b88d41
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 977B
                                                                                                                                                            • SHA256 fe1c9068316880e6e0c8c28ea3bc0114a550336f5e87e0a949e9f03108d3f624
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 3d896f89f7701072440be85d0255c146f05367ba198c0988b073a190a50d278e
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 bb1bf9f321cea545451d4d7cfc82fea75efe07acfb83fd8de8b162c7ff8bdece
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 148f04c9df96611f6230d2d875ed2f94bb0a80bc3a78081f932f7e0ee74f11c7
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 913535cea21eceeda2ca35af4e85f5e37fec492a8c99f301119afdf1237b7270
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 5ca61f27f485e3a62e3e28a912881c13d949a7fb6e7b4c3ba434883c961480a6
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 41559d2a742865c22b8748db6c3bdb41c5482fa32881201466bd6c9854a4fc99
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 972fa68b5c2a0e05f184d8baa5d4b5cfd74eaf1c13828a020279c107955f73b7
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 8e1c391ced35d287b37803e478cb7a1aec73c7882644c5d570f80439fe77dc41
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 3ee52ff2d5fb1844ace6be9df76e3073bec5ca496a70631b60cca8285e0a3401
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 0635dcb6dcd7ed02b7c6a03c89db1ef590bbed4a6cd572ec2eaf01ed1cb64ff9
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 e68788f70b86543145e5950822df5fdf03c264e2f5d2565c7c22d2cfd71bf857
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 9f70a6c6c680dbc6fd53c2da52912879ddb1904c416c5efdd892654d70895f69
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 d13cf587bfefa6e7afe3d7a7b054e68d49f42b6ed9a74856d0e0aba579dcf1f1
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 65ea52672d8c6b7802376277ace6de386e48dafa6cbaadb4350ba73a63546ad0
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 3606c2c4a399077fdaa340ef5725d15be3160e0542ef1fb267b48c0acfe649be
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.0.1555252979~RFe5a4c8b.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.0.1555252979~RFe5a4c8b.TMP
                                                                                                                                                            • Size 412B
                                                                                                                                                            • SHA256 99d902115b1efc74088e8528e52b6bf48efb0e0141f2cf94091491c13bdc8ce0
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 416B
                                                                                                                                                            • SHA256 8e60977cf6cb2cf8782ac0b9ea445eff8f5f286585414f92c60193518ce8095a
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 7fc4364adbb08c8b51e1c8b2f08c6103730b644394954634ea0d0a187e87a38a
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 a9025332996c8517f76c545aae1d476d8898616563575a8cc07ddca1ee8078d1
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 8e863364ecd410e84ff4dff067c1e2ba58b5168088ce0fcb5017236f06084147
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 5b41e737beaa8a997223541019d76f444a2a152cced5ae61d4c5289bbaa11e48
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 694B
                                                                                                                                                            • SHA256 3cb803808746d3cf3a28a277e40f9617a1ab1ebe433ce9cb65243cf1db63f096
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 509B
                                                                                                                                                            • SHA256 d77c1fcfa24d7e7cc9956ace5b71fefec2380ed514d070a98d37eeca09ed6f18
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 b6183e16e5143dc60e3506e1fed039d50eda215f52542934219209358b7b5328
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 45810dfb2b7092f4f847b5991577bb4ceea8042dff2b3b0bd7a7e23040a73c89
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 5cf6c2f410c155fc718b78c741324583dca1c3f8010fbc91f19e73a511095279
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 0904422e7951f761eab763072f07ba28c42fd6caefcf240eff8a967565e5b98e
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 d0bc292584a17a17a49942f2e94c3f57cadf34b6d8266a6a5d7607f7611e50c9
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 6c4692874ab2ef6b208935cd5b53bc5b6652f46c8aac00c201e190e5443e34a1
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 8fa6141b6e0e8f70aaad8114e54d8c3884c6a20dd4594dc6ce2adf5b87482797
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 57efac8a8e4c8d1cc9f0308d8d6b06c639ae952309fb83d771033c0116c1182e
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 dee6654d73c49be84cbd37abadc7e6d62ed2727d7501fc1b971fcfecdb768a1f
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 200B
                                                                                                                                                            • SHA256 d7310bc2fd93eeb77105f972177a7d848bf8b264ddeb425f95f91e3822cd603e
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 981B
                                                                                                                                                            • SHA256 c017011d6bbe157f04dd07ccc0b2e82f3e60e0550150face5a73de173917af27
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 edc1309fb77cbff9cfe9e6695368a4dbae93d28f749268938f78f4fc66dbd3be
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 783B
                                                                                                                                                            • SHA256 72929729941c9279745fbb41f80b89203380b8c6578f66a42f64c2fd424b9bd0
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 2KB
                                                                                                                                                            • SHA256 7684ce688c378b2342a395261ef8cd0c977dc80274e14ee541af904594dbc3bd
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 a151ec95843c45c40923977be15aa339d4eade630cf9f8660531796fc844c92d
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 f050bb27d5be19ade25e7bcbabdf2512e51ce91effb1d2e4b017fa09ce9dfe3b
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 601B
                                                                                                                                                            • SHA256 c0be99827ee8dc91d0d94224dc5600b3ff5425e2d66844ab06d1d8b3ed93a0e3
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 d8d64edf7d953064b002621e4d40bb8ea3b1fae37c13f7c6f1f650e61b3c5dce
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 df911c9ff27c9b009ad4d457c1f0802f8b986b447b7ad6605071aa714bcb03c1
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 17fcdd10d9ef176b96a9de994346c0100ee11df02a71da27dc7c9b41f793ca98
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 880B
                                                                                                                                                            • SHA256 2f1acfc84336d0e6bbb788700e7fcea6c1363762a84e1cb04801fc04110ddb07
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 9b02143d2f61a216c7a0e48b0e4e6b09e2d9797d594861a03311d0109f77583a
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 7d4938d6af5db335b3b1f7c1d20fba6813775c32249640aa6128fee938675cab
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 a4f6626560c1d58132b655914fb473d5cdc3430d480ef0e57b37297536f69017
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 ee7c7ef9652b764880ce022f80c71415efd031aca7c89d518ff6a60298532548
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 6747333c9744a1baf93c07d83a8e72edac5ca882c4d8d1e33146ef6d7be80b0e
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168
                                                                                                                                                            • Size 1KB
                                                                                                                                                            • SHA256 2cb378aa2432082346a9f5041c330aa08fa22f736a98c6d2833f079961fe492b
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.1.254271168~RFe5a4f2b.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.1.254271168~RFe5a4f2b.TMP
                                                                                                                                                            • Size 171B
                                                                                                                                                            • SHA256 b83f7d82e39ab431869e85cea4879bbb40623b4ffeae44f553faa6281a013bd1
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.2.393152703
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.2.393152703
                                                                                                                                                            • Size 242B
                                                                                                                                                            • SHA256 380e80c2ac59706afb4e8c64da7b5202b2fd4eebb91d85e051fccd4b4ebfd3be
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            ssdfp5192.2.393152703~RFe5a9413.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5192.2.393152703~RFe5a9413.TMP
                                                                                                                                                            • Size 198B
                                                                                                                                                            • SHA256 b39c4167a531f6a4eeafd70411b3a3c6dfc4b80e945a3d6711d069d90ce3001a
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            data_0
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                                                                                                            • Size 8KB
                                                                                                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                            Submit Download

                                                                                                                                                            data_1
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                                                                                                                                                            • Size 264KB
                                                                                                                                                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                            Submit Download

                                                                                                                                                            data_2
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                                                                                                            • Size 8KB
                                                                                                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                            Submit Download

                                                                                                                                                            data_3
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                                                                                                            • Size 8KB
                                                                                                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                            Submit Download

                                                                                                                                                            Local State
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 5415eb43f7b5ff9c4ab111ac650cc2e5ba422e313229a7ab3eebec68a487463a
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            Local State~RFe5a9413.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State~RFe5a9413.TMP
                                                                                                                                                            • Size 3KB
                                                                                                                                                            • SHA256 6671e7c0c77555e678e283e233f3136262d6ad771f2d7954124fd2577f6b4b9f
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            assistant_prefs.json
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                                                                                                                                            • Size 151B
                                                                                                                                                            • SHA256 cd8bec4a1cdc2fcf6c6a1809f67eb278fb063e6a0d9fe70c54171bc49d2aac92
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            assistant_prefs.json~RFe5abda4.TMP
                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json~RFe5abda4.TMP
                                                                                                                                                            • Size 151B
                                                                                                                                                            • SHA256 275ded8e8503f96b532e91f60525b1373481d491010b871719ce589d17260d7c
                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            OperaGXSetup (1).exe.crdownload
                                                                                                                                                            • Path C:\Users\Admin\Downloads\OperaGXSetup (1).exe.crdownload
                                                                                                                                                            • Size 3.9MB
                                                                                                                                                            • SHA256 f6f091eb079ce78234d6dafc8d39915f533b5a9c038d1a095886d7ae6dfad658
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            OperaGXSetup.exe
                                                                                                                                                            • Path C:\Users\Admin\Downloads\OperaGXSetup.exe
                                                                                                                                                            • Size 3.9MB
                                                                                                                                                            • SHA256 87092f83575db3736127e6a72914350498f0aa4e966e72fd89ded8c2a219c01c
                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                            Submit Download

                                                                                                                                                            memory/2648-1034-0x00000222E19B0000-0x00000222E19BC000-memory.dmp
                                                                                                                                                            Download

                                                                                                                                                            memory/2648-652-0x00000222E19B0000-0x00000222E19BC000-memory.dmp
                                                                                                                                                            Download

                                                                                                                                                            memory/3228-2144-0x00000000014F0000-0x0000000001553000-memory.dmp
                                                                                                                                                            Download

                                                                                                                                                            memory/3228-4919-0x00000000014F0000-0x0000000001553000-memory.dmp
                                                                                                                                                            Download

                                                                                                                                                            memory/4908-1028-0x000001629F070000-0x000001629F07C000-memory.dmp
                                                                                                                                                            Download

                                                                                                                                                            memory/5188-1053-0x00007FFBD8E20000-0x00007FFBD8E21000-memory.dmp
                                                                                                                                                            Download

                                                                                                                                                            memory/5188-1054-0x00007FFBD97D0000-0x00007FFBD97D1000-memory.dmp
                                                                                                                                                            Download

                                                                                                                                                            memory/5356-2173-0x0000000000D70000-0x0000000000DD3000-memory.dmp
                                                                                                                                                            Download